Cross-Site Scripting Vulnerability in Kulga News Software by Kulga Software and Telecommunications Limited
CVE-2026-105323

6.1MEDIUM

Key Information:

Vendor: Kulga Software And Telecommunications Limited Company
Status: Kulga News Software
Vendor: CVE Published:; 27 October 2026

🔔 Create Kulga Software And Telecommunications Limited Company Vulnerability Alert

What is CVE-2026-105323?

A cross-site scripting vulnerability exists in Kulga News Software due to improper neutralization of input during web page generation. This vulnerability allows attackers to execute arbitrary scripts in the context of users interacting with affected versions of the software, specifically from versions 26.7.4 up to but not including 26.10.0. Attackers can exploit this flaw through reflected XSS, potentially compromising user data and session integrity.

Affected Version(s)

Kulga News Software v26.7.4

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 27, 2026
Vulnerability Reserved
Oct 5, 2026

Credit

Emirhan Efeoglu

CVE-2026-105323 Data

JSON