SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-18642

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-03 · Last synced 2026-09-02

CyberRota Analysis

AI-Generated

A deserialization vulnerability in the eta-otp-lock software from TUBITAK BILGEM allows for object injection, potentially enabling an attacker to execute arbitrary code. This high-severity flaw impacts versions prior to 1.0.4 and should be prioritized by organizations using this software to mitigate the risk of exploitation. Immediate updates or mitigations are recommended to protect sensitive systems from potential compromise.

CVE
CVE-2026-18642
Severity
HIGH
CVSS
7.8
EPSS
0.13%

Original NVD Description

Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.