EUVD-2026-74781
GHSA-m8qv-w7p3-m7cv
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Network-accessible web app; low-privilege account required per CWE-306 context; only limited integrity impact - no confidentiality or availability consequence described.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
Lifecycle Timeline
1DescriptionCVE.org
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.
This issue affects Library Reservation System: before v22.2.
AnalysisAI
Input data manipulation is possible in the Yordam Informatics Library Reservation System before v22.2 due to a missing authentication check on a critical function (CWE-306), reachable over the network by low-privileged authenticated users. The flaw enables integrity violations - altering reservation records or system data - without requiring elevated privileges or user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid low-privilege account in the Library Reservation System (e.g., a registered patron or staff account), consistent with the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.3 base score (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) reflects a constrained risk profile: impact is limited to low-level integrity manipulation with no confidentiality or availability consequences, and exploitation requires an existing authenticated session. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Library Reservation System v22.2 or later, as specified in the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today