Vulnerability · Published Oct 8, 2026 · Assigned by TR-CERT
CVE-2026-89290HTML Injection in İzometri Informatics' eimzamip
Low 3.5
In plain English
A low-severity security flaw in eimzamip from İzometri IT Services Domestic and Foreign Trade Co. Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.2%top 95.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| İzometri IT Services Domestic and Foreign Trade Co. Ltd. | eimzamip | v1.6.4 – before v1.6.7 |
Weakness: CWE-80 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275 government-resource