PT-2026-41009 · Yordam Information Technology Consulting · Library Automation System

Published 2026-05-14 · Updated 2026-05-14 · CVE-2025-15023

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Library Automation System: from v.19.5 before v.22.1.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-15023

Affected Products

Library Automation System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-15023 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240 · Note