UYAP Document Editor vulnerabilities

3 known CVE vulnerabilities in UYAP Document Editor, translated and rated.

CVE-2026-18390High
An OS command injection vulnerability in UYAP Document Editor allows arbitrary command execution. Affects versions before 5.4.20.
CVE-2026-12613High
A deserialization of untrusted data vulnerability in UYAP Document Editor allows object injection. Affects versions before 5.4.20.
CVE-2026-16999Medium
UYAP Document Editor (Ministry of Justice) has an improper restriction of XML external entity reference vulnerability (XXE), allowing Serialized Data External Linking. This affects versions from 4.5.17 before 5.4.17.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS