CVE-2026-18915

MediumCVSS 5.0

Published: 06/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

A vulnerability in eta-otp-lock before 1.0.4 allows invocation of a process using visible sensitive information, enabling system footprinting.

Risk Assessment

An attacker can obtain system information, which may facilitate further attacks and compromise security.

Recommendation

Update eta-otp-lock to version 1.0.4 or later to eliminate the vulnerability.

Other vulnerabilities in eta-otp-lock

CVE-2026-18642High
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.

Original NVD description (English source)

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.