CVE-2026-19721 · Other
NO FIX YET · SEE WHAT TO DO
İmzager, an electronic signature application from TÜBİTAK BİLGEM, does not restrict XML external entity references in some data it processes. The sources do not say what an attacker can read or whether it can be triggered remotely.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Teams running İmzager versions from 2.10.5 before 2.10.7 are affected. The sources do not describe the data path, configuration or role needed to reach the flaw.
Not affected if version-outside-range
Who cares imzager
2.10.5 to before 2.10.72.10.7 or laterImproper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.
This issue affects İmzager: from 2.10.5 before 2.10.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-19721") · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.