CVE Program partner

TR-CERT

TR-CERT (Computer Emergency Response Team of the Republic of Türkiye)

API
CVEs, 365 days391874 all time, 13 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationTR-CERT (Computer Emergency Response Team of the Republic of Türkiye)
RoleCNA
TypeCERT
Reports tomitre
ScopeVulnerability assignment related to its vulnerability coordination role.
Advisorieshttps://siberguvenlik.gov.tr/guvenlik-bildirimleri

Latest CVEs · RSS

  • CVE-2026-15575 2026-10-16 · CVSS 5.3
    Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 202
  • CVE-2026-15219 2026-10-16 · CVSS 6.5
    Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This iss
  • CVE-2026-14177 2026-10-16 · CVSS 7.5
    Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Com
  • CVE-2026-16740 2026-10-14 · CVSS 9.8
    Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on phys
  • CVE-2026-16741 2026-10-14 · CVSS 9.8
    Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual applianc
  • CVE-2026-89279 2026-10-13 · CVSS 6.5
    Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 be
  • CVE-2026-13138 2026-10-13 · CVSS 8.6
    Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. T
  • CVE-2026-12613 2026-10-12 · CVSS 8.8
    Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux a
  • CVE-2026-18390 2026-10-12 · CVSS 7.8
    Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Informati
  • CVE-2026-90983 2026-10-09 · CVSS 8.2
    Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issue affects
  • CVE-2026-92085 2026-10-09 · CVSS 5.4
    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Indust
  • CVE-2026-86405 2026-10-09 · CVSS 9.8
    Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signatur
  • CVE-2026-85531 2026-10-09 · CVSS 9.8
    Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature
  • CVE-2026-12859 2026-10-08 · CVSS 6.5
    Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.
  • CVE-2026-89290 2026-10-08 · CVSS 3.5
    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip
  • CVE-2026-91844 2026-10-08 · CVSS 7.3
    Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files.
  • CVE-2026-19218 2026-10-08 · CVSS 9.1
    Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Passwo
  • CVE-2026-92555 2026-10-08 · CVSS 9.8
    Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Pane
  • CVE-2026-19083 2026-10-08 · CVSS 8.8
    Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Fu
  • CVE-2026-85523 2026-10-06 · CVSS 8.8
    Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade
  • CVE-2026-82924 2026-10-06 · CVSS 5.3
    Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. T
  • CVE-2026-12380 2026-10-06 · CVSS 6.1
    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce P
  • CVE-2026-5782 2026-10-02 · CVSS 5.2
    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows R
  • CVE-2026-85215 2026-10-02 · CVSS 7.1
    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Inject
  • CVE-2026-11795 2026-10-02 · CVSS 5.3
    Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce P

All CVE Program partners