CVE-2026-19731: Path Traversal in TÜBİTAK BİLGEM's İmzager
Published Nov 4, 2026
·Updated
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.
This issue affects İmzager: from 2.10.5 before 2.10.7.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TÜBİTAK BİLGEM İmzagerto a version that resolves this vulnerability.Fixed in 2.10.7
Event History
Nov 4, 2026
CVE Published
via MITRE·08:15 AM
Data Sourced
via MITRE·08:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
İmzager versions from 2.10.5 up to, but not including, 2.10.7 are affected.
2
Does exploitation require prior authentication or user interaction?
The supplied CVSS vector indicates no privileges are required, but user interaction is required. Exploitation is rated as requiring local access.
3
What is the security impact?
The issue can affect integrity, while the supplied CVSS vector indicates no confidentiality or availability impact.