CVE-2026-12859 — IDOR in Caz Informatics' Advancity ALMS Cloud

CVE-2026-12859

IDOR in Caz Informatics' Advancity ALMS Cloud PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Caz Informatics Services Trade Inc. / Advancity ALMS Cloud	affected 0 through 2026-10-08

CWE

CWE-862

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.