Cross-Site Scripting Vulnerability in TurkHotspot by Loglama.net
CVE-2026-5782

5.2MEDIUM

Key Information:

Vendor

Loglama.net

Status
Turkhotspot
Vendor
CVE Published:
2 October 2026

What is CVE-2026-5782?

A cross-site scripting vulnerability exists in TurkHotspot, a product by Loglama.net, due to inadequate input neutralization during web page generation. This flaw allows attackers to inject malicious scripts into web pages viewed by other users, resulting in potential data theft or unauthorized actions. As the product is no longer supported, users are advised to be vigilant and consider alternative solutions.

Affected Version(s)

TurkHotspot 0 <= 2026-10-02

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yiğit DUMAN
.