CVE-2026-78377

MediumCVSS 6.1

Published: 09/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The Yordam Library Information and Document Automation Program (versions from v22.1 before v22.2) has an open redirect vulnerability to untrusted sites, which enables phishing attacks.

Risk Assessment

The risk includes exploitation for phishing, which could lead to credential theft.

Recommendation

Update the program to version v22.2 or later. Additionally, implement URL redirect validation mechanisms.

Other vulnerabilities in Yordam Library Information and Document Automation Program

CVE-2026-19733Medium
The Yordam Library Information and Document Automation Program (before v22.2) has a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to make requests from the server to internal resources.

Original NVD description (English source)

URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS