{"id":"CVE-2026-19731","title":"Path Traversal in TÜBİTAK BİLGEM's İmzager","summary":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-22"],"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"İmzager","affected":["İmzager >= 2.10.5 < 2.10.7"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T08:15:49.216Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-19731","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456"}],"tags":["cve.org"],"epss":0.00127,"epssPercentile":0.0242,"ingestedAt":"2026-11-05T20:33:06.719Z","slug":"CVE-2026-19731","body":"## Overview\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.\n\n## Affected\n\n- `İmzager >= 2.10.5 < 2.10.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}