High severity · published Mar 10, 2026
CVE-2026-2339
RCE in TUBITAK BILGEM's Liderahenk
7.5
CVSS
0.8%
EPSS
No
On KEV
Description
Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.
This issue affects Liderahenk: before 3.5.1.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Liderahenk · TUBITAK BILGEM Software Technologies Research Institute
before 3.5.1 · source: vendor
Affected product
LI
Liderahenk
TUBITAK BILGEM Software Technologies Research Institute
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2339
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2339
siberguvenlik.gov.tr
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0087
www.usom.gov.tr
https://www.usom.gov.tr/bildirim/tr-26-0087
More from Liderahenk
9.8
CVE-2026-6508
RCE in TUBITAK BILGEM's Liderahenk
6.1
CVE-2025-7706
Improper Access Control in TUBITAK BILGEM's Liderahenk