CVE-2026-16999 — XXE in Ministry of Justice's UYAP Document Editor

CVE-2026-16999

XXE in Ministry of Justice's UYAP Document Editor PUBLISHED

Description (CNA)

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

Affected (CNA)

Vendor / product	Versions
Ministry of Justice / UYAP Document Editor	affected 4.5.17 before 5.4.17

CWE

CWE-611

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0818

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.