MajorCritical vulnerability

CVE-2026-13138 (CVSS 8.6)

NVD · officialPublished Oct 13, 2026Risk 37/100EPSS 0.2%

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

Technical details

CVSS

8.6

AV:NetworkAC:LowPR:NoneUI:NoneC:LowI:HighA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source