Vulnerability · Published Jul 10, 2026 · Assigned by TR-CERT
CVE-2026-6212IDOR in Teracity's TeraMIS
High 8.8
In plain English
A high-severity authorization bypass via user-controlled key in TeraMIS from Teracity Software Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 61.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Privilege Abuse. This issue affects TeraMIS: from V03.26.01.14 through 30.04.2026.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Teracity Software Technologies Inc. | TeraMIS | V03.26.01.14 – through 30.04.2026 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0528 government-resource