{"affected":[{"defaultStatus":"unaffected","product":"İmzager","source":"CNA: TR-CERT","vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","versions":[{"lessThan":"2.10.7","status":"affected","version":"2.10.5","versionType":"semver"}]}],"cveId":"CVE-2026-19721","cwes":["CWE-611"],"description":"Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":3.3,"severity":"low","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1793779973235,"publishedAt":1793779973235,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456"}],"remediation":[],"revision":"570d90a9589580a5b454a79d0100ae0c7677b93a0255ee6d8b5ec4fc8865afc9","sources":[{"modifiedAt":1793779973235,"name":"CNA: TR-CERT","retrievedAt":1793783324956,"url":"https://www.cve.org/CVERecord?id=CVE-2026-19721"}],"ssvc":null,"status":"published","title":"XXE in TÜBİTAK BİLGEM's İmzager","updatedAt":1793783324956}