CVE-2026-19731 - Vulnerability Details - OpenCVE

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456

History

Wed, 04 Nov 2026 08:30:00 +0000

Type	Values Removed	Values Added
Description		Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal. This issue affects İmzager: from 2.10.5 before 2.10.7.
Title		Path Traversal in TÜBİTAK BİLGEM's İmzager
Weaknesses		CWE-22
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456
Metrics		cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-11-04T08:15:49.216Z

Updated: 2026-11-04T08:15:49.216Z

Reserved: 2026-08-13T13:11:47.793Z

Link: CVE-2026-19731

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-22

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-19731", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-08-13T13:11:47.793Z", "datePublished": "2026-11-04T08:15:49.216Z", "dateUpdated": "2026-11-04T08:15:49.216Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-11-04T08:15:49.216Z"}, "title": "Path Traversal in T\u00dcB\u0130TAK B\u0130LGEM's \u0130mzager", "datePublic": "2026-11-04T08:13:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "affected": [{"vendor": "T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute", "product": "\u0130mzager", "versions": [{"status": "affected", "version": "2.10.5", "lessThan": "2.10.7", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute \u0130mzager allows Path Traversal.\n\nThis issue affects \u0130mzager: from 2.10.5 before 2.10.7.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute \u0130mzager allows Path Traversal.<p>This issue affects \u0130mzager: from 2.10.5 before 2.10.7.</p>"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "LOW", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "credits": [{"lang": "en", "value": "Mustafa An\u0131l YILDIRIM", "type": "finder"}], "source": {"defect": ["TR-26-1456"], "advisory": "TR-26-1456", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}