Vulnerability · Published Sep 9, 2026 · Assigned by TR-CERT
CVE-2026-78377Open Redirect in Yordam Informatics's Library Automation System
Medium 6.1
In plain English
A medium-severity open redirect in Library Information and Document Automation Program from Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Official description
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. | Library Information and Document Automation Program | v22.1 – before v22.2 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1036 government-resource