CVE-2026-18642 — Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock

CVE-2026-18642

Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock PUBLISHED

Description (CNA)

Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.

Affected (CNA)

Vendor / product	Versions
TUBITAK BILGEM Software Technologies Research Institute / eta-otp-lock	affected 0 before 1.0.4

CWE

CWE-502

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0730

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.