CVE-2025-15023CWE-863broken-access-control

CVE-2025-15023

High · published May 14, 2026

CVSS v3.1

8.8

EPSS

Percentile

11.4

In the wild

Unconfirmed

What it is

Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Library Automation System: from v.19.5 before v.22.1.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00216 · 11.4th percentile
Weakness: CWE-863 · Incorrect Authorization
Published: 2026-05-14T22:16Z

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240 · [email protected]

EPSS history

Timeline

14 MAY 17:36Z
Improper Access Control in Yordam Informatics' Library Automation System
cvelistv5