CVE-2026-2339General

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection. This issue affects Liderahenk: before 3.5.1.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-19)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-10: 1Mentions · 2026-03-19: 2Technical Details · 2026-03-10: 1Technical Details · 2026-03-19: 203-1003-19
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-101
General1
2026-03-192
Disclosure1General1
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-2339 Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege… https://www.cve.org/CVERecord?id=CVE-2026-2339 ----- Traducción: CVE-2026-2339 Fal… http://infoflow.cloud`

    Post summary

    The post cites CVE-2026-2339 and briefly describes a remote code inclusion flaw in Liderahenk, but offers no PoC, exploit details, patch information, or evidence of active exploitation.

    0000043
    61 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2339 Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege… https://www.cve.org/CVERecord?id=CVE-2026-2339

    Post summary

    The text announces CVE-2026-2339 with brief technical details but provides no information on PoC, exploit code, active use, or patching, indicating a straightforward disclosure.

    00000201
    56.8K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2339 - TUBITAK BILGEM Software Technologies Research Institute Liderahenk Missing Authentication for Critical Function Remote Code Inclusion Privilege Abuse Command Injection Intel Report: https://ift.tt/Hhzyqok

    Post summary

    The intel report highlights a missing authentication flaw in TUBITAK BILGEM’s Liderahenk that allows remote code inclusion via command injection, though it does not provide a PoC, exploit, patch, or evidence of active exploitation.

    0000043
    345 followersView on X

Explore more