CVE-2026-6508CWE-346

RCE in TUBITAK BILGEM's Liderahenk

Critical · published May 7, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Liderahenk: from 2.0.1 before 2.0.2.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2026-05-07T11:47Z
EPSS history
Timeline
  • 07 MAY 11:47Z
    RCE in TUBITAK BILGEM's Liderahenk
    cvelistv5