CVE-2026-88907

HighCVSS 7.4

Published: 24/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 24/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

22th percentile - higher than 22% of all known CVEs

Summary

An Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass. This issue affects UlakPDF through 09092026.

Risk Assessment

Authentication bypass may allow unauthorized users to access protected functions or data. This affects UlakPDF installations through 09092026.

Recommendation

Update UlakPDF to a version later than 09092026 once a fix is available. Until then, restrict access to the application and monitor for unauthorized access attempts.

Other vulnerabilities in UlakPDF

CVE-2026-88916Medium
An Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF through 09092026.

Original NVD description (English source)

Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass. This issue affects UlakPDF: through 09092026.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS