Brute Force Vulnerability in Turkiye Electricity Transmission Corporation Mobile App
CVE-2026-1816

6.3MEDIUM

Key Information:

Vendor

Turkiye Electricity Transmission Corporation (tei̇aş)

Status
Mobile Application
Vendor
CVE Published:
21 May 2026

What is CVE-2026-1816?

A vulnerability exists in the Turkiye Electricity Transmission Corporation Mobile Application that allows attackers to exploit improper restrictions on excessive authentication attempts. This flaw could lead to brute force attacks, enabling unauthorized access through repeated login attempts. It affects versions 1.6.2 through 1.13, potentially compromising user accounts and sensitive data.

Affected Version(s)

Mobile Application 1.6.2 < 1.13

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Metin ÖGTEM
.