# CVE-2026-11838

## Summary

- **CVE ID:** CVE-2026-11838
- **Severity:** MEDIUM
- **CVSS Score:** 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
- **CWE:** CWE-306
- **Published:** Sep 9, 2026
- **Last Modified:** Sep 9, 2026

## Description

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation.

This issue affects Library Reservation System: before v22.2.

## Affected Products

- Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. — Library Reservation System (0)

## References

- [CNA](https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1035)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.25%
- **EPSS Percentile:** 16.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._