Vulnerability · Published Aug 25, 2026 · Assigned by TR-CERT

CVE-2026-16286File Upload in TRTEK Software's Software Repository Management

Critical 9.8

In plain English

A critical-severity unrestricted file upload in Software Repository Management from TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.6%top 52.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee.

Affected products (as reported)

Vendor	Product	Versions
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company	Software Repository Management	0 – before 2fb4acee

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0899 government-resource