CVE-2026-88916

10th percentile - higher than 10% of all known CVEs

An Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF through 09092026.

A user may gain privileges beyond their assigned access level, potentially leading to unauthorized actions in the system. The impact depends on the configuration and the attacker's role in the application.

Update UlakPDF to a version later than 09092026 that removes the vulnerability, and review the application's access control mechanisms.