Is CVE-2026-13138 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13138?

CVE-2026-13138 has a CVSS v3 severity of HIGH (8.6).

Back

CVE-2026-13138

Description

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.