{"affected":[{"defaultStatus":"unknown","product":"Advancity ALMS Cloud","source":"CNA: TR-CERT","vendor":"Caz Informatics Services Trade Inc.","versions":[{"lessThan":"v1046","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-12859","cwes":["CWE-862"],"description":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Advancity ALMS Cloud: before v1046.","epss":{"date":"2026-11-03","percentile":0.10438,"score":0.00204},"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: iletisim@usom.gov.tr","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793791035370,"publishedAt":1791470022457,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276"},{"source":"iletisim@usom.gov.tr","tags":[],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276"}],"remediation":[],"revision":"6e9717a78c168cfc14d214f1f2a6d2e9f96a5221303d732fb8229f90276deb1b","sources":[{"modifiedAt":1793789816787,"name":"CNA: TR-CERT","retrievedAt":1793790527109,"url":"https://www.cve.org/CVERecord?id=CVE-2026-12859"},{"modifiedAt":1793791035370,"name":"NVD","retrievedAt":1793794548692,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12859"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793790528978,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-12859"}],"ssvc":{"assessedAt":1791486873586,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"IDOR in Caz Informatics' Advancity ALMS Cloud","updatedAt":1793794548692}