CVE-2026-19733

MediumCVSS 5.3

Published: 09/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Yordam Library Information and Document Automation Program (before v22.2) has a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to make requests from the server to internal resources.

Risk Assessment

The risk includes access to internal systems and data, which could lead to privilege escalation or information leakage.

Recommendation

Update the program to version v22.2 or later. Additionally, restrict outbound server requests and use allowlists.

Other vulnerabilities in Yordam Library Information and Document Automation Program

CVE-2026-78377Medium
The Yordam Library Information and Document Automation Program (versions from v22.1 before v22.2) has an open redirect vulnerability to untrusted sites, which enables phishing attacks.

Original NVD description (English source)

Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automation Program: before v22.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS