CVE-2026-13138

8.6High

Published 13 Oct 2026 · NVD status: Deferred

8.6High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on integrity
Weakness: CWE-602

The AI triage for this one isn't ready yet. Check back in a few minutes; the full NVD record is below in the meantime.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Ad · In-content banner

NVD description

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309

Source: nvd.nist.gov/vuln/detail/CVE-2026-13138