CVE-2025-15024HIGH 8.8EPSS p15.6%

CVE-2025-15024CVE-2025-15024

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.25% probability of exploitation · percentile 15.6% · 2026-06-18T12:00:27Z
Published2026-05-14
Last modified2026-05-14

Underlying weaknesses· 1

CWE-94

References

  1. https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240

1

TypeTargetConfidenceTier
WeaknessImproper Control of Generation of Code ('Code Injection')cwe-940%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-15023
CVE
CVE-2025-15025
CVE
CVE-2025-1301
CVE
CVE-2025-10439
CVE
CVE-2024-5682
CVE
CVE-2025-10438
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.