Vulnerability · Published Jul 8, 2026 · Assigned by TR-CERT

CVE-2026-6280Improper Access Control in Nomysoft Informatics' Nomysem

Medium 6.5

In plain English

A medium-severity security flaw in Nomysem from NOMYSOFT Informatics Education and Consulting Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 68.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
NOMYSOFT Informatics Education and Consulting Inc.	Nomysem	0 – through 08072026

Weakness: CWE-213 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0516 government-resource