CVE-2026-12613

CVSS 8.8 (high) · published 2026-10-12

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue affects UYAP Document Editor: before 5.4.20; UYAP Document Editor: before 5.4.21.

Weakness: CWE-502

Source: NVD CVE-2026-12613

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1299

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.