{"schema":"threatline.record/2","record":{"id":"CVE-2026-86450","aliases":[],"summary":"Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal","details":"Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects DetaWix Mobile Web Portal: before v1.0.19.","categories":["Unclassified"],"product":"DetaWix Mobile Web Portal","vendor":"Parla Auto Automotive Trading Limited Company","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86450","source_modified_at":"2026-09-30T15:28:20.067Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"DetaWix Mobile Web Portal","vendor":"Parla Auto Automotive Trading Limited Company","versions":[{"status":"affected","version":"0","lessThan":"v1.0.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00245,"percentile":0.14858,"score_date":"2026-10-23"},"published_at":"2026-09-29T13:46:39.350Z","modified_at":"2026-09-30T15:28:20.067Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-86450","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-30T15:28:20.067Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-86450","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1210","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-09-30T15:18:07.892513Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-09-30T15:28:20.067Z","content_hash":"1306d35f2fbba6d54bb87c1b0d1eba620b785fd57633fef52f72adc422f80c83"}}