TUBITAK BILGEM Liderahenk Missing Authentication Vulnerability Allowing Remote Code Inclusion and Command Injection
Vulnerability
A vulnerability allowing missing authentication for critical functions has been identified in TUBITAK BILGEM Software Technologies Research Institute's Liderahenk product, affecting versions prior to 3.4.0. This vulnerability allows remote code inclusion, privilege abuse, and command injection.
Impact
Exploitation of this vulnerability could lead to unauthorized remote code execution, elevated privileges, and injection of arbitrary commands.
Remediation
Users are advised to upgrade to Liderahenk version 3.4.0 or later.
Added: Mar 10, 2026, 7:04 PM
Updated: Mar 10, 2026, 7:04 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
0.0relevance
3.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.