Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-88916 EUVD-2026-85869GHSA-6gp4-g9px-6pmh

Admin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by TR-CERT

Vendor: TÜBİTAK ULAKBİM Product: UlakPDF

Description

Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation.

This issue affects UlakPDF: through 09092026.

Affected products

VendorProductAffectedFixed
TÜBİTAK ULAKBİM UlakPDF ≤ 09092026 —

References