CVE-2026-2406
IDOR in Universe Software's Online Registration and Workflow Management System
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jul 22, 2026
- Updated
- Aug 5, 2026
- Reserved
- Feb 12, 2026
Description
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client.
This issue affects Online Registration and Workflow Management System: through 12022026.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | TR-CERT |
Weaknesses
- CWE-639 Authorization bypass through User-Controlled key
Affected Products
| Product | Versions |
|---|---|
Online Registration and Workflow Management SystemUniverse Software Computer Marketing Trade and Industry Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0594government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.