CVE-2025-8350

CRITICO 9.8CVE-2025-8350 · Published 19/02/2026 · updated 17/06/2026

In breve

CVE-2025-8350 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.62%, superiore al 49.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0077
usom.gov.tr/bildirim/tr-26-0077

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free