PT-2026-20269 · Tubitak Bilgem Software Technologies Research Institute · Liderahenk

Edip Alhazouri̇ · Published 2026-02-17 · Updated 2026-02-17 · CVE-2025-7706

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Liderahenk versions 3.0.0 through 3.3.1

Description A missing authentication check for a critical function in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows for Remote Code Inclusion. The issue impacts the software’s ability to properly verify access to sensitive functionality, potentially allowing an attacker to execute arbitrary code.

Recommendations Update Liderahenk to version 3.5.0 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-7706

Affected Products

Liderahenk

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-7706 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0069 · Note
• https://t.me/CVEtracker/44871 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0069 · Note
• https://t.me/cveNotify/152167 · Telegram Post
• https://twitter.com/CVEnew/status/2023760672404975912 · Twitter Post