---
id: CVE-2026-11838
title: >-
  Missing authentication for critical function vulnerability in Yordam
  Informatics Technology Consulting, Training, and Electronic Systems Industry
  and Trade Inc
summary: >-
  Missing authentication for critical function vulnerability in Yordam
  Informatics Technology Consulting, Training, and Electronic Systems Industry
  and Trade Inc. Library Reservation System allows Input Data Manipulation.


  This issue affec…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
cwe:
  - CWE-306
vendor: >-
  Yordam Informatics Technology Consulting, Training, and Electronic Systems
  Industry and Trade Inc.
product: Library Reservation System
affected:
  - library_reservation_system < v22.2
published: '2026-09-09'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T15:37:49.157'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-11838'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035'
    label: iletisim@usom.gov.tr
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-09T12:50:57.992175Z'
ingestedAt: '2026-09-09T10:06:16.500Z'
epss: 0.00185
epssPercentile: 0.07163
---

## Overview

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.

This issue affects Library Reservation System: before v22.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.