CVE-2026-11838CWE-306

CVE-2026-11838

Medium · published September 9, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.

This issue affects Library Reservation System: before v22.2.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-09T14:17Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035 · [email protected]
EPSS history
Timeline
  • 10 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 09 SEP 09:14Z
    Improper Authorization in Yordam Informatics' Library Reservation System
    cvelistv5