CVE Catalog

CVE-2026-1815

MediumCVSS 5.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile Application: from 1.6.2 before 1.13.

Risk Assessment

An attacker can exploit an improperly terminated user session to gain unauthorized access to the victim's account.

Recommendation

Update the mobile application to version 1.13 or later, which includes improved session management.

Original NVD description (English source)

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile Application: from 1.6.2 before 1.13.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS