CVE-2026-12613 Ministry of Justice General Directorate of Information Technology CVE debrief

Who should care

Defenders responsible for UYAP Document Editor deployments should assess exposure and prioritize updates to mitigate potential risks. This includes verifying and updating UYAP Document Editor to version 5.4.20 or later, assessing exposure in environments using UYAP Document Editor, and monitoring for potential exploitation attempts. Security teams and vulnerability management teams should also review the CVE record,

Why it matters

The Ministry of Justice General Directorate of Information Technology's UYAP Document Editor vulnerability requires attention from defenders to prevent potential remote code execution.

• Verify and update UYAP Document Editor to version 5.4.20 or later
• Assess exposure in environments using UYAP Document Editor
• Monitor for potential exploitation attempts

Technical summary

The UYAP Document Editor has a deserialization of untrusted data vulnerability, which could allow for object injection. This issue affects UYAP Document Editor versions before 5.4.20. The vulnerability is caused by the deserialization of untrusted data, which could allow for object injection. Defenders should prioritize verifying and updating UYAP Document Editor to version 5.4.20 or later, and assess exposure in their environments.

Defensive priority

Defenders should prioritize verifying and updating UYAP Document Editor to version 5.4.20 or later, and assess exposure in their environments.

Recommended defensive actions

• Verify UYAP Document Editor version and update to 5.4.20 or later if necessary
• Assess exposure in environments using UYAP Document Editor
• Monitor for potential exploitation attempts

Evidence notes

The CVE record and source item provide details on the vulnerability, but additional information on exploitation or affected systems is limited. The vulnerability is caused by the deserialization of untrusted data, which could allow for object injection. There is no information on public exploitation, but defenders should verify and update UYAP Document Editor to version 5.4.20 or later. The source item and CVE record provide source-provided CVE metadata and official NIST NVD detail.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.