CVE-2026-13138

Published: Oct 13, 2026Modified: Oct 16, 2026Deferred

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Exploitability: 3.9 / Impact: 4.7

Source: iletisim@usom.gov.tr (Secondary)

Description

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

Related CWEs

CWE-602

Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309

Source: iletisim@usom.gov.tr

Timeline

No history available yet.