CVE-2026-94249 · Other
NO FIX YET · SEE WHAT TO DO
Liderahenk, a management product from TÜBİTAK BİLGEM, does not check authorization on some functions, so a user can perform actions they should not. The sources say an attacker can abuse privileges, but do not describe the exact actions.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organisations running Liderahenk versions before 2.0.3 are exposed. The sources do not say which roles or deployment settings make the flaw reachable, so the team should confirm that from the vendor's page.
Not affected if version-2.0.3-or-later
Who cares liderahenk, self-hosted
2.0.3 are affected2.0.3 or later (per the description)Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Privilege Abuse.
This issue affects Liderahenk: before 2.0.3.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.