{"id":"CVE-2026-11838","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-11838","generatedAt":"2026-10-28T03:38:29.039Z","title":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","published":"2026-09-09T10:17:04.000Z","lastModified":"2026-09-09T15:37:49.000Z","status":"Deferred","sourceIdentifier":"iletisim@usom.gov.tr","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-306"],"affected":[],"epss":{"score":0.00313,"percentile":0.2404,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035","source":"iletisim@usom.gov.tr"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-11838","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}