What is the CVSS score of CVE-2026-2339?

CVE-2026-2339 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

How to fix or mitigate CVE-2026-2339?

Within 24 hours: Inventory all Liderahenk deployments and assess network exposure; implement network segmentation to restrict access to critical functions. Within 7 days: Deploy Web Application Firewall (WAF) rules to enforce authentication; disable non-essential critical functions if operationally feasible; conduct security audit of Liderahenk access logs. Within 30 days: Evaluate alternative solutions or vendor security updates; establish continuous monitoring for exploit activity; document and validate all compensating controls.

CVE-2026-2339

HIGH

Missing Authentication for Critical Function (CWE-306)

2026-03-10 iletisim@usom.gov.tr

Command Injection Authentication Bypass

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.5

DescriptionCVE.org

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.This issue affects Liderahenk: before v3.4.0.

AnalysisAI

TUBITAK BILGEM Software Technologies Research Institute Liderahenk is affected by missing authentication for critical function (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-306: Missing Authentication for Critical Function) affects TUBITAK BILGEM Software Technologies Research Institute Liderahenk. Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.This issue affects Liderahenk: before v3.4.0.