CVE-2026-2347: IDOR in Akıllı Ticaret's E-Commerce Pack

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-14 · updated 2026-10-26
Weakness: CWE-639

Description

Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website: before 4.5.001.

Affected products

Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website: before 4.5.001 — fixed in 4.5.001

How to fix

Upgrade to a fixed version: Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website 4.5.001. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0222

Get alerted when CVE-2026-2347 or the next vulnerability affects your stack