Medium · 5.0 CVE-2026-18915 EUVD-2026-53819GHSA-2x9j-ppfr-c4pq

Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by TR-CERT

Vendor: TÜBİTAK BİLGEM Software Technologies Research Institute Product: eta-otp-lock

Description

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting.

This issue affects eta-otp-lock: before 1.0.4.

Affected products

Vendor	Product	Affected	Fixed
TÜBİTAK BİLGEM Software Technologies Research Institute	eta-otp-lock	< 1.0.4	1.0.4

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0753 government-resource