{"id":"CVE-2026-11838","title":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc","summary":"Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affec…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-306"],"vendor":"Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.","product":"Library Reservation System","affected":["library_reservation_system < v22.2"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:37:49.157","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11838","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035","label":"iletisim@usom.gov.tr"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T12:50:57.992175Z"},"ingestedAt":"2026-09-09T10:06:16.500Z","epss":0.00185,"epssPercentile":0.07113,"slug":"CVE-2026-11838","body":"## Overview\n\nMissing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.\n\nThis issue affects Library Reservation System: before v22.2.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}