Vulnerability · Published Oct 8, 2026 · Assigned by TR-CERT
CVE-2026-12859IDOR in Caz Informatics' Advancity ALMS Cloud
Medium 6.5
In plain English
A medium-severity missing authorization in Advancity ALMS Cloud from Caz Informatics Services Trade Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 90.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: before v1046.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Caz Informatics Services Trade Inc. | Advancity ALMS Cloud | 0 – before v1046 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276 government-resource