High · 7.4 CVE-2026-88907 EUVD-2026-85868GHSA-974p-3f2w-mrv2

SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by TR-CERT

Description

Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass.

This issue affects UlakPDF: through 09092026.

Vendor	Product	Affected	Fixed
TÜBİTAK ULAKBİM	UlakPDF	≤ 09092026	—