CVE-2026-13138
Improper Authorization in Divasoft Software's Biletiva Ticketing Platform
CVSS Score
8.6
EPSS Score
0.0%
EPSS Percentile
0th
Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.
| CWE | CWE-602 |
| Vendor | divasoft software and e-commerce inc. |
| Product | biletiva ticketing platform |
| Published | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for divasoft software and e-commerce inc. biletiva ticketing platform
Be the first to know when new high vulnerabilities affecting divasoft software and e-commerce inc. biletiva ticketing platform are published β delivered to Slack, Telegram or Discord.
Get Free Alerts β
Free Β· No credit card Β· 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
Low
Affected Versions
Divasoft Software and E-Commerce Inc. / Biletiva Ticketing Platform
0 β€ 2026-07-23
References
Credits
Umut Kayra DoΔan