Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-1815 EUVD-2026-31289GHSA-g5rh-53cq-px9w

Session Hijacking in TEİAŞ's Mobile Application

Published May 21, 2026 · Updated May 21, 2026 · Assigned by TR-CERT

Vendor: Turkiye Electricity Transmission Corporation (TEİAŞ) Product: Mobile Application

Description

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking.

This issue affects Mobile Application: from 1.6.2 before 1.13.

Affected products

VendorProductAffectedFixed
Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application 1.6.2 – < 1.13 1.13

References