Vulnerability · Published Jul 20, 2026 · Assigned by TR-CERT

CVE-2026-13724Business Logic Bypass in Gobito's Corporate Training Management System

Medium 4.3

In plain English

A medium-severity security flaw in Corporate Training Management System from Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 79.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation. This issue affects Corporate Training Management System: before dd1a9df64.

Affected products (as reported)

Vendor	Product	Versions
Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co.	Corporate Training Management System	0 – before dd1a9df64

Weakness: CWE-602 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0582 government-resource