Observable Response Discrepancy Vulnerability in Ikas E-Commerce Infrastructure by IKAS Technology Inc.
CVE-2026-14177

7.5HIGH

Key Information:

Vendor

Ikas Technology Inc.

Status
Ikas E-commerce Infrastructure
Vendor
CVE Published:
16 October 2026

What is CVE-2026-14177?

The vulnerability in Ikas E-Commerce Infrastructure allows for account footprinting due to an observable response discrepancy. This flaw enables potential attackers to gather information about user accounts by analyzing variations in responses from the application. This oversight raises significant security concerns as it could facilitate unauthorized access to sensitive user details, making it imperative for users and administrators to mitigate potential risks associated with this vulnerability.

Affected Version(s)

ikas E-Commerce Infrastructure 0 <= 2026-07-13

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.