CVE-2026-13724 is a client-side enforcement of server-side security vulnerability in the Corporate Training Management System by Gobito Informatics Technologies Engineering Industry and Trade Ltd. This vulnerability allows manipulation of input data because security controls that should be enforced on the server are instead enforced on the client side, which can be bypassed. The vulnerability is categorized under CWE-602 (Client-Side Enforcement of Server-Side Security). The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact, and no availability impact. No patch or fix information is currently available, and no exploits are known in the wild.

The vulnerability allows an attacker with low privileges to manipulate input data by bypassing client-side security controls that should be enforced on the server. This can lead to integrity violations within the affected system. There is no impact on confidentiality or availability. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor vendor communications for updates. Until a fix is available, avoid relying solely on client-side security controls and consider additional server-side validation where possible.