Medium · 5.3 CVE-2026-82924 EUVD-2026-93415GHSA-hhv7-wc2c-r7jv

PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by TR-CERT

Vendor: Pusula Communication, IT, and Internet Industry and Trade Product: Expert Mail

Description

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force.

This issue affects Expert Mail: through 2026-09-18.

Affected products

Vendor	Product	Affected	Fixed
Pusula Communication, IT, and Internet Industry and Trade	Expert Mail	≤ 2026-09-18	—

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1257 government-resource