CVE-2026-13138: Improper Authorization in Divasoft Software's Biletiva Ticketing Platform
Published Oct 13, 2026
·Updated
Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.
This issue affects Biletiva Ticketing Platform: through 2026-07-23.
Affected Software
1 affected component
Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform
Event History
Oct 13, 2026
CVE Published
via MITRE·08:37 AM
Data Sourced
via MITRE·08:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated account or user interaction?
No. The CVSS vector indicates network-based exploitation with no privileges required and no user interaction.
2
What security impact is indicated if the issue is exploited?
The issue is rated high severity with a CVSS score of 8.6. It has high integrity impact, with low confidentiality and availability impact.
3
Which Biletiva Ticketing Platform versions are identified as affected?
The affected range is listed as Biletiva Ticketing Platform versions through 2026-07-23.