CVE-2026-8287
Last modified
CVE-2026-8287 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| BizimHesap Information Systems Industry and Trade Inc. | Online Pre-Accounting Software | <= 17072026 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-8287?
How severe is CVE-2026-8287?
How do I fix CVE-2026-8287?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-82864pdfme pdf-lib versions before 5.5.10 contain an unbounded bu…6.5
- CVE-2026-82865pdfme schemas before 5.5.10 contains a cross-site scripting …4.4
- CVE-2026-82866@pdfme/common before 5.5.10 contains a server-side request f…6.8
- CVE-2026-82867@pdfme/schemas before 5.5.9 contains a cross-site scripting …6.1
- CVE-2026-82868@pdfme/schemas before 5.5.9 contains a cross-site scripting …6.1
- CVE-2026-82869ToolJet Database versions before v3.16.44 contain a privileg…7.7
- CVE-2026-82870ToolJet before v3.16.208 fails to validate organizationId ow…9.6
- CVE-2026-82871ToolJet before v3.16.208 fails to validate organization memb…7.7
- CVE-2026-82872ToolJet before v3.16.208 fails to validate that the path org…9.1
- CVE-2026-82873ToolJet through 3.0.0-ee-beta.2 contains authorization bypas…5
- CVE-2026-82874ToolJet before v3.16.208 fails to validate that authenticate…9.9
- CVE-2026-82875ToolJet before v3.16.208 contains an authorization bypass vu…5.5
Are you affected by CVE-2026-8287?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST