CVE-2026-16999

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-16999
Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0818
Configurations

No configuration.

History

23 Oct 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad por restricción inadecuada de referencia a entidad externa XML en el Editor de Documentos UYAP del Ministerio de Justicia permite el enlace externo de datos serializados. Este problema afecta al Editor de Documentos UYAP: desde la 4.5.17 antes de la 5.4.17.
Information

Published : 2026-08-12 14:17

Updated : 2026-10-23 20:10

NVD link : CVE-2026-16999

Mitre link : CVE-2026-16999

CVE.ORG link : CVE-2026-16999

JSON object : View

Products Affected

No product.

CWE
CWE-611

Improper Restriction of XML External Entity Reference