CVE-2026-12859

Missing Authorization vulnerability in Caz Informatics Services Trade Inc

Risk score: 41/100
CVSS: 6.5 v3.1
Exploit chance (30 days): 0.2%
Published: 8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.5 medium

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276

Original description

Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Last activity 8 Oct 2026. Patch Forecast updates every hour.