Threat database

CVE-2026-12613 is a high-severity vulnerability in the Ministry of Justice General Directorate of Information Technology UYAP Document Editor affecting Windows, Linux, and MacOS versions prior to 5.4.20 and 5.4.21. It involves deserialization of untrusted data, which allows object injection. The vulnerability has a CVSS score of 8.8, indicating a critical impact on confidentiality, integrity, and availability. No explicit patch or remediation details are provided in the available data.

CVE-2026-18390 is an OS command injection vulnerability in the Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows, Linux, and iOS platforms. It affects versions before 5.4.20 and 5.4.21. The vulnerability arises from improper neutralization of special elements used in OS commands, allowing potential command injection. The CVSS 3.1 score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, so patch status is not confirmed.