{"id":"CVE-2026-19721","title":"XXE in TÜBİTAK BİLGEM's İmzager","summary":"Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-611"],"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"İmzager","affected":["İmzager >= 2.10.5 < 2.10.7"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T08:12:53.235Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-19721","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456"}],"tags":["cve.org"],"epss":0.0011,"epssPercentile":0.01288,"ingestedAt":"2026-11-05T20:33:06.719Z","slug":"CVE-2026-19721","body":"## Overview\n\nImproper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.\n\n## Affected\n\n- `İmzager >= 2.10.5 < 2.10.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}