{"id":"CVE-2026-11838","aliases":["EUVD-2026-74781","GHSA-m8qv-w7p3-m7cv"],"status":"published","title":"Improper Authorization in Yordam Informatics' Library Reservation System","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00313,"percentile":0.24509,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2026-09-09T09:14:06Z","modified":"2026-09-09T15:37:49Z","products":[{"vendor":"yordam informatics technology consulting, training, and electronic systems industry and trade inc.","product":"library reservation system"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11838"},{"url":"https://github.com/advisories/GHSA-m8qv-w7p3-m7cv"}],"sources":{"cve":[{"id":"CVE-2026-11838","title":"Improper Authorization in Yordam Informatics' Library Reservation System","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","status":"published","published":"2026-09-09T09:14:06.327Z","modified":"2026-09-09T12:51:23.389Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:20:04.809935Z"}],"euvd":[{"id":"EUVD-2026-74781","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","status":"published","published":"2026-09-09T09:14:06Z","modified":"2026-09-09T12:51:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:27.763941Z"}],"ghsa":[{"id":"GHSA-m8qv-w7p3-m7cv","title":"Missing authentication for critical function vulnerability in Yordam Informatics Technology...","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","status":"published","published":"2026-09-09T12:32:09Z","modified":"2026-09-09T12:32:10Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:11:38.096751Z"}],"nvd":[{"id":"CVE-2026-11838","description":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.","status":"published","published":"2026-09-09T10:17:03.91Z","modified":"2026-09-09T15:37:49.157Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:12:45.93749Z"}]}}