CVE-2026-16999: Ministry Of Justice Uyap Document Editor

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

Affected products

• Ministry Of Justice Uyap Document Editor: from 4.5.17, before 5.4.17 (fixed in 5.4.17)

Published 2026-08-12. Last modified 2026-08-26.