CVE-2026-11838
Improper Authorization in Yordam Informatics' Library Reservation System
- State
- Published
- Severity
- 4.3 Medium
- Published
- Sep 9, 2026
- Updated
- Sep 9, 2026
- Reserved
- Jun 10, 2026
Description
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.
This issue affects Library Reservation System: before v22.2.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | TR-CERT |
Weaknesses
- CWE-306 Missing authentication for critical function
Affected Products
| Product | Versions |
|---|---|
Library Reservation SystemYordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.