CVE-2026-6508criticalCWE-346

CVE-2026-6508: critical vulnerability in TUBITAK BILGEM Software Technologies Research…

RCE in TUBITAK BILGEM's Liderahenk

Published

Follow this CVE+ Monitor Liderahenk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 0.2%
from disclosure to weaponsame day
Published on NVDMay 7
1st PoCMar 10
Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liderahenk: from 2.0.1 before 2.0.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TUBITAK BILGEM Software Technologies Research Institute · Liderahenk
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TUBITAK BILGEM Software Technologies Research…

In the same product, most dangerous first.

CVE-2026-2339HIGHRCE in TUBITAK BILGEM's LiderahenkEPSS 0.9%CVE-2025-7706MEDIUMImproper Access Control in TUBITAK BILGEM's LiderahenkEPSS 0.3%