CVE-2026-1621 PUBLISHED

Register Bypass in Universal Sotware's E-Municipality

Assigner: TR-CERT
Reserved: 29.01.2026 Published: 14.08.2026 Updated: 14.08.2026

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers.

This issue affects E-Municipality: from 20251127 before 20260204.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS Score: 5.3

Product Status

Vendor Universal Software Inc.
Product E-Municipality
Versions Default: unaffected
  • affected from 20251127 to 20260204 (excl.)

Credits

  • İbrahim YİĞİTSOY finder

References

Problem Types

  • CWE-305 Authentication bypass by primary weakness CWE

Impacts

  • CAPEC-21 Exploitation of Trusted Identifiers