CVE-2026-6223

CVSS 9.4 (critical) · published 2026-09-07

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 before 2.3.

Weakness: CWE-307

Source: NVD CVE-2026-6223

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1014

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.