Medium severity · published Sep 9, 2026
CVE-2026-78377
Open Redirect in Yordam Informatics's Library Automation System
6.1
CVSS
0.2%
EPSS
No
On KEV
Description
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing.
This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
Affected product
LI
Library Information and Document Automation Program
Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-78377
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-78377
siberguvenlik.gov.tr
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1036
More from Library Information and Document Automation Program
5.3
CVE-2026-19733
SSRF in Yordam Informatics's Library Automation System