Medium severity6.3NVD Advisory· Published Aug 12, 2026

CVE-2026-16999

Description

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking.

This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

Affected products

Ministry Of Justice/UYAP Document Editorllm-create
Range: 4.5.17 <= v < 5.4.17

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0818nvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000