CVE-2026-85209 — IDOR in AVEZ Electronics's LMS

CVE-2026-85209

IDOR in AVEZ Electronics's LMS PUBLISHED

Description (CNA)

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Learning Management System (LMS): through 2026-09-18.

Affected (CNA)

Vendor / product	Versions
AVEZ Electronics Communication Training and Consultancy Trade Inc. / Learning Management System (LMS)	affected 0 through 2026-09-18

CWE

CWE-862

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1242

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.