PT-2026-41010 · Yordam Information Technology Consulting · Library Automation System

Publicado 2026-05-14 · Atualizado 2026-05-14 · CVE-2025-15024

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.

This issue affects Library Automation System: from v.19.5 before v.22.1.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2025-15024

Produtos afetados

Library Automation System

Referências · 2

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15024 · Nota de Segurança