CVE-2026-11838: Improper Authorization in Yordam Informatics' Library Reservation System
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.
This issue affects Library Reservation System: before v22.2.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely reachable and has low attack complexity, but the CVSS vector indicates that the attacker needs low-level privileges. No user interaction is required.
What security impact is indicated?
The documented impact is limited to integrity: an attacker may manipulate input data. The CVSS vector indicates no confidentiality or availability impact.
Which deployments are affected?
Yordam Informatics Library Reservation System versions before 22.2 are affected. The provided information does not state whether any particular configuration or deployment is excluded.