anonhaven

CVE-2026-11838

MEDIUM CVSS 3.1: 4.3 EPSS 0.18%
Updated Sep 09, 2026
Yordam Informatics Technology Consulting, Training, And Electronic Systems Industry And Trade Inc.
Parameter Value
CVSS 4.3 (MEDIUM)
Type CWE-306 (Missing Authentication for Critical Function)
Vendor Yordam Informatics Technology Consulting, Training, And Electronic Systems Industry And Trade Inc.
Public PoC No

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-306 Missing Authentication for Critical Function

Vulnerable Products

yordam informatics technology consulting, training, and electronic systems industry and trade inc.:library reservation system

References 1

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035
iletisim@usom.gov.tr
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-19733

Yordam Informatics Technology Consulting, Training, And Electronic Systems Industry And Trade Inc.

5.3