Revenue Administration Türkiye · E-Signature · CVE-2026-16027
**Name of the Vulnerable Software and Affected Versions**
Revenue Administration Türkiye's E-Signature versions 2.4.4.0 through 2.5.0
**Description**
A Server-Side Request Forgery (SSRF) issue exists in the Revenue Administration Türkiye's E-Signature software. This flaw allows an unauthenticated attacker to perform a WebSocket-to-XAdES SSRF, which occurs when a server is tricked into making requests to an unintended location.
**Recommendations**
Update Revenue Administration Türkiye's E-Signature to version 2.5.1.0.