CVE-2026-19733 is a Server-Side Request Forgery (SSRF) vulnerability in the Library Information and Document Automation Program by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The vulnerability allows an attacker to cause the server to send crafted requests to unintended locations. The affected versions are all versions prior to v22.2. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, resulting in limited confidentiality impact and no integrity or availability impact. There is no information about available patches or vendor advisories.

An attacker can exploit this SSRF vulnerability remotely without authentication or user interaction to cause the server to make unintended requests. The impact is limited to a low confidentiality breach, with no effect on integrity or availability. This could potentially expose internal resources or sensitive information accessible by the server but does not allow direct code execution or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting server outbound requests or implementing network-level controls to limit SSRF impact.