PT-2026-24208 · Tubitak Bilgem · Liderahenk

Edip Alhazouri̇ · Published 2026-03-10 · Updated 2026-04-30 · CVE-2026-2339

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TUBITAK BILGEM Software Technologies Research Institute Liderahenk versions prior to 3.4.0

Description A missing authentication check for a critical function in Liderahenk allows for remote code inclusion, privilege abuse, and command injection. The issue allows an attacker to potentially execute arbitrary code, gain unauthorized access, and inject malicious commands.

Recommendations Update Liderahenk to version 3.4.0 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-2339

Affected Products

Liderahenk

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-2339 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0087 · Note
• https://t.me/CVEtracker/47006 · Telegram Post
• https://twitter.com/cyberbivash/status/2031413129519759629 · Twitter Post
• https://twitter.com/CVEnew/status/2034520449946640567 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0087 · Note
• https://t.me/cveNotify/161572 · Telegram Post