CVE-2026-13138 — Improper Authorization in Divasoft Software's Biletiva Ticketing Platform

CVE-2026-13138

Improper Authorization in Divasoft Software's Biletiva Ticketing Platform PUBLISHED

Description (CNA)

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

Affected (CNA)

Vendor / product	Versions
Divasoft Software and E-Commerce Inc. / Biletiva Ticketing Platform	affected 0 through 2026-07-23

CWE

CWE-602

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.