CVE-2026-78377

MediumCVSS 6.1/10Last modified Sep 9, 2026

Description

URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing.

This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.	Library Information and Document Automation Program	>= v22.1, < v22.2

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1036

Timeline

Published: Sep 9, 2026
Last modified: Sep 9, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-783786.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is CVE-2026-783798.1Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remo CVE-2026-78388.8UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing CVE-2026-783808.7RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external n CVE-2026-783818.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API ha CVE-2026-783837.5Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP proc CVE-2026-783847.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand CVE-2026-783858.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Mar CVE-2026-783868.7RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associate CVE-2026-783879.4RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint CVE-2026-783888.8IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forg CVE-2026-78399.1UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.