PT-2026-68878
CVE-2026-16027
·
Published
2026-08-07
·
Updated
2026-08-07
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Revenue Administration Türkiye's E-Signature versions 2.4.4.0 through 2.5.0
Description
A Server-Side Request Forgery (SSRF) issue exists in the Revenue Administration Türkiye's E-Signature software. This flaw allows an unauthenticated attacker to perform a WebSocket-to-XAdES SSRF, which occurs when a server is tricked into making requests to an unintended location.
Recommendations
Update Revenue Administration Türkiye's E-Signature to version 2.5.1.0.
Found an issue in the description? Have something to add? Feel free to write us 👾