Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-6223 EUVD-2026-72369GHSA-w6hf-m328-w7vc

OTP Bypass in Bahçelievler Muncipality's BiHayat App

Published Sep 7, 2026 · Updated Sep 30, 2026 · Assigned by TR-CERT

Vendor: Bahçelievler Muncipality Product: BiHayat App

Description

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass.

This issue affects BiHayat App: from 2.1.7 before 2.3.

Affected products

VendorProductAffectedFixed
Bahçelievler Muncipality BiHayat App 2.1.7 – < 2.3 2.3

References