CVE-2026-13138

Published: Ott 13, 2026 Last Modified: Ott 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,6
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: high
Availability: low

Description

AI Translation Available

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.

This issue affects Biletiva Ticketing Platform: through 2026-07-23.

602

Client-Side Enforcement of Server-Side Security

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Availability
Potential Impacts:
Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Gain Privileges Or Assume Identity
Applicable Platforms
Technologies: ICS/OT, Mobile
Likelihood of Exploit: Medium
View CWE Details
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr…
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309