CVE-2026-19733

Deferred Deferred - Pending Action

SSRF in Yordam Library Automation Program

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automation Program: before v22.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-19733

EUVD

EUVD-2026-74782

Affected Vendors & Products

Vendor	Product	Version / Range
yordam_informatics_technology_consulting_training_and_electronic_systems_industry_and_trade_inc	library_information_and_document_automation_program	to 22.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the Library Information and Document Automation Program developed by Yordam Informatics Technology Consulting. SSRF allows an attacker to make the server send crafted requests to unintended locations, potentially accessing internal systems or sensitive data.

Detection Guidance

This vulnerability is a Server-Side Request Forgery (SSRF) affecting Yordam Informatics Library Information and Document Automation Program before v22.2. Detection typically involves checking for unusual outbound requests from the server, monitoring network traffic for unexpected connections, and reviewing application logs for suspicious input handling. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to access internal resources, bypass firewalls, or interact with other systems in the network. This may lead to unauthorized data access, service disruption, or further attacks on connected systems.

Compliance Impact

SSRF vulnerabilities can lead to unauthorized data exposure, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Compliance may be compromised if sensitive data is accessed or exfiltrated.

Mitigation Strategies

Update the Library Information and Document Automation Program to version 22.2 or later to address the SSRF vulnerability.

Hi! I’m here to help you understand CVE-2026-19733. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70