XSS Vulnerability in Armiya Access Control System by Armiya Information Technologies
CVE-2026-7380

6.1MEDIUM

Key Information:

Vendor: Armiya Information Technologies Ltd. Co.
Status: Access Control System (gks)
Vendor: CVE Published:; 7 July 2026

🔔 Create Armiya Information Technologies Ltd. Co. Vulnerability Alert

What is CVE-2026-7380?

A vulnerability exists in Armiya Information Technologies' Access Control System (GKS) where improper handling of Script-Related HTML tags can allow an attacker to inject malicious scripts. This type of Cross-Site Scripting (XSS) flaw specifically targets HTML attributes, potentially compromising user data and allowing unauthorized actions. Users of GKS before version 2 are especially at risk, making it crucial to implement security measures to mitigate this threat.

Affected Version(s)

Access Control System (GKS) 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 7, 2026
Vulnerability Reserved
Apr 29, 2026

Credit

Mert TURAN

CVE-2026-7380 Data

JSON