{"id":"CVE-2026-15586","aliases":[],"title":"OTP Brute-Force Account Takeover in Idvlabs Software's Ontime","description":"Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force.\n\nThis issue affects Ontime: through 2026-10-27.\n NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","severity":"medium","score":5.3,"published":"2026-10-27T12:32:04.384Z","modified":"2026-10-27T12:32:04.384Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1407"],"sources":[{"name":"CVE","id":"CVE-2026-15586","modified":"2026-10-27T12:32:04.384Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-15586"}],"assessments":[{"source":"CNA","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","score":5.3}]}