Every CVESearch/Get API key

CVE-2026-19731

Path Traversal in TÜBİTAK BİLGEM's İmzager

3.3 Low

CVE-2026-19731 is a low vulnerability (CVSS 3.3) in Tubitak Bilgem Software Technologies Research Institute Imzager, published November 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. No source names a fixed version.

What does this mean?
Severity
3.3 LowCVSS 3.1, CVE List
Exploit chance
0.13%EPSS, 2nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.13%Unchanged since Nov 4, 2026
90%50%10%1%

Affected products

What each source reports

CVE List Score used3.3

Path Traversal in TÜBİTAK BİLGEM's İmzager

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

Record
CVE-2026-19731
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-22
Updated
2026-11-09
EUVDEUVD-2026-1167803.3

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

Record
EUVD-2026-116780
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-09
GitHub AdvisoriesGHSA-cgwj-vcgg-qcjc3.3

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

Record
GHSA-cgwj-vcgg-qcjc
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-22
Updated
2026-11-04
NVD3.3

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

This issue affects İmzager: from 2.10.5 before 2.10.7.

Record
CVE-2026-19731
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-22
Updated
2026-11-09

History

History
RecordedChangedSources
publishedEUVD, NVD
publishedEUVD
aliases, referencesGitHub Advisories
cwes, products, references, severity, titleCVE List
first indexedEUVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open