CVE-2026-18915

Published: Aug 6, 2026Modified: Aug 26, 2026Deferred

5.0

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.3 / Impact: 3.6

Source: iletisim@usom.gov.tr (Secondary)

Description

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.

Related CWEs

CWE-214

Invocation of Process Using Visible Sensitive Information

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0753

Source: iletisim@usom.gov.tr

Timeline

No history available yet.