Skip to content
OpenAdvisories
High · 8.8 CVE-2025-15024 EUVD-2025-209859GHSA-f6gp-pqfj-wc55

RCE in Yordam Informatics' Library Automation System

Published May 14, 2026 · Updated May 14, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.

This issue affects Library Automation System: from v.19.5 before v.22.1.

Affected products

VendorProductAffectedFixed
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Library Automation System v.19.5 – < v.22.1 v.22.1

References