CVE-2026-121191: Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remote
Published Nov 10, 2026
·Updated
Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects eta-remote: from 0.0.2 before 0.0.3.
Affected Software
1 affected component
TÜBİTAK BİLGEM eta-remote>=0.0.2<0.0.3
Event History
Nov 10, 2026
CVE Published
via MITRE·11:52 AM
Data Sourced
via MITRE·11:52 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which eta-remote versions are affected?
eta-remote versions from 0.0.2 up to, but not including, 0.0.3 are affected.
2
Does exploitation require authentication or user interaction?
No. The supplied vector indicates that exploitation requires no privileges and no user interaction, and it is reachable over an adjacent network.
3
What is the expected impact if exploited?
The issue can expose high-impact confidentiality information. No integrity or availability impact is indicated by the supplied vector.