TÜBİTAK BİLGEM eta-remote: Incorrect default permissions (CVE-2026-121267)
An incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows accessing functionality not properly constrained by ACLs.
CVE search metadata
CVE search record: CVE-2026-121267. Severity: high. CVSS: 7.8. KEV: no. Product: eta-remote (< 0.0.3). Brief: TÜBİTAK BİLGEM eta-remote: Incorrect default permissions (CVE-2026-121267). Brief link: https://feed.craftedsignal.io/briefs/2026-11-eta-remote-acl/
Triage facts
Revision 1- Applicability
- eta-remote (< 0.0.3)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 10, 14:33 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-121267 describes an incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote (versions 0.0.2 before 0.0.3). The vulnerability allows for accessing functionality that is not properly constrained by Access Control Lists (ACLs). The CVSS v3.1 base score is 7.8.