CVE-2026-1816
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issue affects Mobile Application: from 1.6.2 before 1.13.
Risk Assessment
An attacker can repeatedly attempt to guess a user's password without lockout, increasing the risk of account takeover.
Recommendation
Update the mobile application to version 1.13 or later, which includes a mechanism to limit login attempts.
Original NVD description (English source)
Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issue affects Mobile Application: from 1.6.2 before 1.13.

