CVE-2026-2406CWE-639

CVE-2026-2406

Medium · published July 22, 2026

CVSS v3.1

6.5

EPSS

Percentile

28.7

In the wild

Unconfirmed

What it is

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client.

This issue affects Online Registration and Workflow Management System: through 12022026.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00361 · 28.7th percentile
Weakness: CWE-639 · Authorization Bypass Through User-Controlled Key
Published: 2026-07-22T13:16Z

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0594 · [email protected]

EPSS history

Timeline

22 JUL 08:51Z
IDOR in Universe Software's Online Registration and Workflow Management System
cvelistv5