PT-2026-68878 · Revenue Administration Türkiye · E-Signature

Sangsoo Jeong

·

CVE-2026-16027

·

Published

2026-08-07

·

Updated

2026-08-07

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Revenue Administration Türkiye's E-Signature versions 2.4.4.0 through 2.5.0
Description A Server-Side Request Forgery (SSRF) issue exists in the Revenue Administration Türkiye's E-Signature software. This flaw allows an unauthenticated attacker to perform a WebSocket-to-XAdES SSRF, which occurs when a server is tricked into making requests to an unintended location.
Recommendations Update Revenue Administration Türkiye's E-Signature to version 2.5.1.0.

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-16027

Affected Products

E-Signature