CVE-2026-19083 — IDOR in AKIN Software's OctoCloud

CVE-2026-19083

IDOR in AKIN Software's OctoCloud PUBLISHED

Description (CNA)

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07.

Affected (CNA)

Vendor / product	Versions
AKIN Software Computer Import-Export Industry and Trade Co. Ltd. / OctoCloud	affected 1.12.06 before 1.12.07

CWE

CWE-639

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1272

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.