CVE-2026-86450CWE-201

CVE-2026-86450

High · published September 29, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects DetaWix Mobile Web Portal: before v1.0.19.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.8th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-09-29T18:17Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1210 · [email protected]
EPSS history
Timeline
  • 01 OCT 03:49Z
    EPSS moved — → 0%
    epss
  • 29 SEP 13:46Z
    Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal
    cvelistv5