CVE-2026-13138

CVSS 8.6 (high) · published 2026-10-13

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

Weakness: CWE-602

Source: NVD CVE-2026-13138

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.