{"id":"CVE-2026-16307","aliases":[],"title":"IDOR in Netiket Information Technologies' EdoWEB","description":"Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects EdoWEB: before 780-g7.","severity":"medium","score":4.3,"published":"2026-10-27T13:23:02.346Z","modified":"2026-10-27T13:23:02.346Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1409"],"sources":[{"name":"CVE","id":"CVE-2026-16307","modified":"2026-10-27T13:23:02.346Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-16307"}],"assessments":[{"source":"CNA","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3}]}