{"id":"CVE-2026-19733","aliases":["EUVD-2026-74782","GHSA-x248-9qc4-259w"],"status":"published","title":"SSRF in Yordam Informatics's Library Automation System","description":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery.\n\nThis issue affects Library Information and Document Automation Program: before v22.2.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00313,"percentile":0.24485,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-918"],"published":"2026-09-09T09:19:08Z","modified":"2026-09-09T15:37:49Z","products":[{"vendor":"yordam informatics technology consulting, training, and electronic systems industry and trade inc.","product":"library information and document automation program"},{"vendor":"yordam information technology consulting, training and electronic systems industry and trade inc.","product":"library information and document automation program"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1036","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19733"},{"url":"https://github.com/advisories/GHSA-x248-9qc4-259w"}],"sources":{"cve":[{"id":"CVE-2026-19733","title":"SSRF in Yordam Informatics's Library Automation System","description":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery.\n\nThis issue affects Library Information and Document Automation Program: before v22.2.","status":"published","published":"2026-09-09T09:19:08.279Z","modified":"2026-09-09T12:47:16.759Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T13:47:17.512524Z"}],"euvd":[{"id":"EUVD-2026-74782","description":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery.\n\nThis issue affects Library Information and Document Automation Program: before v22.2.","status":"published","published":"2026-09-09T09:19:08Z","modified":"2026-09-09T12:47:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:27.763941Z"}],"ghsa":[{"id":"GHSA-x248-9qc4-259w","title":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting,...","description":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery.\n\nThis issue affects Library Information and Document Automation Program: before v22.2.","status":"published","published":"2026-09-09T12:32:09Z","modified":"2026-09-09T12:32:10Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:11:38.096751Z"}],"nvd":[{"id":"CVE-2026-19733","description":"Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery.\n\nThis issue affects Library Information and Document Automation Program: before v22.2.","status":"published","published":"2026-09-09T10:17:04.99Z","modified":"2026-09-09T15:37:49.157Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:12:45.93749Z"}]}}