CVE-2026-77818mediumCWE-79

CVE-2026-77818: medium-severity vulnerability in Yordam Information Technology Consulting…

Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System

Published

Follow this CVE+ Monitor Library Information and Document Automation Program

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.1epss 0.3%
from disclosure to weaponsame day
Published on NVDSep 4
1st PoCSep 4
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. · Library Information and Document Automation Program
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Yordam Information Technology Consulting…

In the same product, most dangerous first.

CVE-2026-19727MEDIUMHTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation SystemEPSS 0.3%