CVE-2026-6223: CWE-307 Improper restriction of excessive authentication attempts in Bahçelievler Muncipality BiHayat App

The vulnerability identified as CVE-2026-6223 in the Bahçelievler Muncipality BiHayat App is classified under CWE-307, which concerns improper restriction of excessive authentication attempts. This weakness enables an authentication bypass, potentially allowing unauthorized access. The affected versions are from 2.1.7 through versions prior to 2.3. The CVSS v3.1 score is 9.4, indicating a critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity, with low impact on availability.

Successful exploitation of this vulnerability can lead to authentication bypass, granting attackers unauthorized access to the application. This compromises confidentiality and integrity of the system, potentially exposing sensitive data or allowing unauthorized actions. Availability impact is low.

No patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to monitor for vendor updates and apply any official patches once released.