İzometri IT Services Domestic and Foreign Trade Co. Ltd. vulnerabilities and threats

CVE-2026-89290 is a stored cross-site scripting (XSS) vulnerability in the eimzamip product by İzometri IT Services Domestic and Foreign Trade Co. Ltd. It arises from improper neutralization of script-related HTML tags. The vulnerability affects versions from 1.6.4 up to but not including 1.6.7. The CVSS score is low (3.5), indicating limited impact primarily on confidentiality. There is no information about an available patch or vendor advisory. No known exploits are reported in the wild.

CVE-2026-91844 is a high-severity vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd.'s eimzamip product. It involves an unrestricted file upload flaw allowing potentially dangerous file types to be uploaded. This vulnerability affects versions from 1.6.4 up to but not including 1.6.6.