{"id":"CVE-2026-19721","aliases":[],"cve":{"records":[{"id":"CVE-2026-19721","source":"TR-CERT","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-13T11:58:15.092Z","published":"2026-11-04T08:12:53.235Z","modified":"2026-11-09T21:20:55.401Z"}],"publishers":[{"name":"TR-CERT","role":"CNA","organizationId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","modified":"2026-11-04T08:12:53.235Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T21:20:55.401Z"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456","tags":["government-resource"],"source":"TR-CERT"}],"weaknesses":[{"id":"CWE-611","description":"CWE-611 Improper restriction of XML external entity reference","source":"TR-CERT"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T21:20:46.542555Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"XXE in TÜBİTAK BİLGEM's İmzager","titleSource":"TR-CERT","descriptionSource":"TR-CERT","description":"Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.","score":3.3,"severity":"low","published":"2026-11-04T08:12:53.235Z","modified":"2026-11-09T21:20:55.401Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","name":"İmzager","platforms":[],"versions":[{"version":"2.10.5","status":"affected","lessThan":"2.10.7","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"TR-CERT","url":"https://www.cve.org/CVERecord?id=CVE-2026-19721"}],"remediation":[],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456"],"sources":[{"name":"CVE","id":"CVE-2026-19721","modified":"2026-11-09T21:20:55.401Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-19721"}],"assessments":[{"source":"TR-CERT","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","score":3.3}],"sourceAffected":[],"observedAt":"2026-11-09T21:26:12.085Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:05:34.570Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-04T08:30:35.935Z","attemptedAt":"2026-11-04T08:30:35.935Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-04T08:30:35.607Z","attemptedAt":"2026-11-04T08:30:35.607Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-04T08:30:36.062Z","attemptedAt":"2026-11-04T08:30:36.062Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-04T08:30:35.736Z","attemptedAt":"2026-11-04T08:30:35.736Z"}],"evidence":[],"aiSummary":{"text":"TÜBİTAK BİLGEM's İmzager versions 2.10.5 before 2.10.7 have an XML external entity reference vulnerability, allowing serialized data external linking. The weakness is due to improper restriction of XML external entity references. This issue affects İmzager.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-04T08:26:03.170Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-19721"}]}}