CVE-2026-19731 · Other
NO FIX YET · SEE WHAT TO DO
İmzager, an electronic signature application from TÜBİTAK BİLGEM, has a path traversal flaw that lets input escape its intended directory. The sources do not say what an attacker can read or write through it.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Organizations running İmzager from 2.10.5 before 2.10.7. The sources do not describe the exposed feature, the data path or the required access, so whether a given deployment is reachable is unknown.
Not affected if version-2.10.7-or-later
Who cares electronic-signature, imzager
2.10.7 or later, per the affected range in the NVD entry.Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.
This issue affects İmzager: from 2.10.5 before 2.10.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-19731") · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.