CVE-2026-1815

MEDIUM

Session Hijacking in TEİAŞ's Mobile Application

Title source: cna

Description

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile Application: from 1.6.2 before 1.13.

References (1)

Core 1

Core References

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0286

Scores

CVSS v3 5.7

EPSS 0.0018

EPSS Percentile 7.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-613

Status published

Products (1)

Turkiye Electricity Transmission Corporation (TEİAŞ)/Mobile Application 1.6.2 - 1.13

Published May 21, 2026

Tracked Since May 21, 2026