High severity7.8NVD Advisory· Published Oct 12, 2026· Updated Oct 12, 2026

CVE-2026-18390

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows OS Command Injection.

This issue affects UYAP Document Editor: before 5.4.20.

Affected products

Ministry Of Justice General Directorate Of Information Technology/UYAP Document Editorllm-fuzzy
Range: <5.4.20

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1299nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000