CVE-2026-12613

Published 12 October 2026 · tracked since 12 October 2026

Description

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This issue affects UYAP Document Editor: before 5.4.20.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-52903 HIGH 8.8
• CVE-2026-109187 MEDIUM 6.5
• CVE-2026-108834 MEDIUM 4.3
• CVE-2026-85499
• CVE-2026-108827 MEDIUM 4.1
• CVE-2026-108828 MEDIUM 4.1
• CVE-2026-108829 MEDIUM 4.7
• CVE-2026-108830 MEDIUM 4.2
• CVE-2026-108826 HIGH 7.3
• CVE-2026-103902 HIGH 7.5

→ Open the live CVE board · all tools