CVE-2026-6508: TUBITAK BILGEM Liderahenk Origin Validation Error Allowing Access to Improperly Constrained Functionality

Overview

CVE-2026-6508 is an Origin Validation Error (CWE-346) in Liderahenk, a product from TUBITAK BILGEM Software Technologies Research Institute. According to the record, the weakness allows access to functionality that is not properly constrained by access control lists (ACLs). The CNA is iletisim@usom.gov.tr and the advisory is also referenced by the Turkish national cyber security authority.

Impact

The CNA-provided CVSS 3.1 base score is 9.8 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This describes network reachability, low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity and availability, as scored by the CNA.

Unauthorized access to restricted functionality is the core risk described in the record.
The CVSS vector suggests the impact could extend to data confidentiality, integrity and service availability.

Affected products and versions

Product: Liderahenk (TUBITAK BILGEM Software Technologies Research Institute).
Affected range stated in the record: from 2.0.1 before 2.0.2.
The record does not include structured affected or fixed version fields, so the boundary is taken from the description text only.

Exploitation status

The CISA Known Exploited Vulnerabilities catalog does not list this CVE in the record provided. No confirmed exploitation appears in the sources consulted. The EPSS probability is 0.00253 with a percentile of 0.15584, which is a low modelled likelihood of exploitation.

Remediation and mitigation

Identify all Liderahenk installations and confirm whether they fall in the range from 2.0.1 before 2.0.2.
Plan an upgrade to 2.0.2 or a later release as the boundary indicated by the description; verify the vendor or official advisory for the exact fixed build.
Until patched, restrict network access to Liderahenk management interfaces to trusted administrative networks and review access control configurations.
Review the Turkish national advisory for guidance from the national authority: TR-26-0181.

Detection guidance

Review logs for unexpected access to administrative or management functions of Liderahenk, especially from unfamiliar sources.
Monitor for changes in permissions or configuration tied to access control settings.
Correlate authentication and authorization events with network telemetry to spot anomalous access patterns.

Limitations of the available information

The record does not provide a fixed version field, a detailed technical description of the affected functionality, the specific ACL mechanism involved, or vendor-confirmed exploitation data. The EPSS date shown in the record is later than the publication date and should be treated with caution. The fixed version 2.0.2 is inferred from the upper bound of the affected range and should be confirmed against the vendor advisory.

Frequently asked questions

What is CVE-2026-6508?

It is an Origin Validation Error (CWE-346) in TUBITAK BILGEM's Liderahenk that allows access to functionality not properly constrained by access control lists. The CNA scored it 9.8 under CVSS 3.1.

Which Liderahenk versions are affected?

The record states that versions from 2.0.1 before 2.0.2 are affected. No structured affected or fixed version data is included, so confirm against the vendor advisory.

Is this vulnerability being exploited?

It is not listed in the CISA KEV catalog in the record, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.