Cross-Site Scripting Vulnerability in LIBRID/LIBREF by Ankaref Innovation and Technology Inc.
CVE-2026-12683

5.4MEDIUM

Key Information:

Vendor: Ankaref Innovation And Technology Inc.
Status: Librid/libref
Vendor: CVE Published:; 10 September 2026

🔔 Create Ankaref Innovation And Technology Inc. Vulnerability Alert

What is CVE-2026-12683?

A cross-site scripting vulnerability exists in the LIBRID/LIBREF software by Ankaref Innovation and Technology Inc. This issue arises from improper handling of user input during web page generation, resulting in stored XSS attacks. Attackers can exploit this weakness to execute malicious scripts in the context of legitimate users, potentially leading to data theft or unauthorized actions. The vulnerability affects versions from 2.01.0.2183 through 10092026. Immediate action is recommended to ensure the security of affected systems.

Affected Version(s)

LIBRID/LIBREF 2.01.0.2183 <= 10092026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 10, 2026
Vulnerability Reserved
Jun 19, 2026

Credit

Ahmet DURMUŞ

CVE-2026-12683 Data

JSON