Cross-Site Scripting Vulnerability in Armiya Information Technologies Ltd. Co. Access Control System
CVE-2026-8306

6.1MEDIUM

Key Information:

Vendor: Armiya Information Technologies Ltd. Co.
Status: Access Control System (gks)
Vendor: CVE Published:; 7 July 2026

🔔 Create Armiya Information Technologies Ltd. Co. Vulnerability Alert

What is CVE-2026-8306?

A cross-site scripting vulnerability exists in Armiya Information Technologies Ltd. Co. Access Control System (GKS), allowing attackers to inject malicious scripts into web pages generated by the application. When these compromised pages are rendered in a user's browser, the injected scripts can execute, potentially compromising sensitive user data or session information. This vulnerability affects versions of the Access Control System (GKS) prior to Version 2, necessitating prompt updates to mitigate the risk of exploitation.

Affected Version(s)

Access Control System (GKS) 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 7, 2026
Vulnerability Reserved
May 11, 2026

Credit

Mert TURAN

CVE-2026-8306 Data

JSON