PT-2026-41010 · Yordam Information Technology Consulting · Library Automation System

Published 2026-05-14 · Updated 2026-05-14 · CVE-2025-15024

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.

This issue affects Library Automation System: from v.19.5 before v.22.1.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-15024

Affected Products

Library Automation System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-15024 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240 · Note