CVE-2026-9161 PUBLISHED

User Enumeration in DernekPlus' Website Template

Assigner: TR-CERT
Reserved: 21.05.2026 Published: 10.09.2026 Updated: 10.09.2026

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting.

This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 5.3

Product Status

Vendor DernekPlus
Product Website Template
Versions Default: unknown
  • affected from 0 to 10092026 (incl.)

References

Problem Types

  • CWE-204 Observable response discrepancy CWE

Impacts

  • CAPEC-575 Account Footprinting