{"id":"CVE-2026-13138","title":"Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc","summary":"Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.\n\nThis issue affects Biletiva Ticketing Platform: through 2026-07-23.","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","cwe":["CWE-602"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T13:32:38.910","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13138","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309","label":"iletisim@usom.gov.tr"}],"tags":["nvd"],"epss":0.00236,"epssPercentile":0.13523,"ingestedAt":"2026-10-13T09:20:23.196Z","slug":"CVE-2026-13138","body":"## Overview\n\nClient-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.\n\nThis issue affects Biletiva Ticketing Platform: through 2026-07-23.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}