Vulnerability · Published Oct 6, 2026 · Assigned by TR-CERT
CVE-2026-82924PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail
Medium 5.3
In plain English
A medium-severity security flaw in Expert Mail from Pusula Communication, IT, and Internet Industry and Trade Co. Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 90.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. | Expert Mail | 0 – through 2026-09-18 |
Weakness: CWE-799 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1257 government-resource