CVE-2026-2406 — MEDIUM (6.5)

Vulnerability Description

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through 12022026.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-639

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0594

FAQ

What is CVE-2026-2406?

CVE-2026-2406 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trus...

How severe is CVE-2026-2406?

CVE-2026-2406 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-2406?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.