CVE-2025-8886CWE-200CWE-732CWE-862CWE-863broken-access-controlinformation-disclosure

CVE-2025-8886

Medium · published October 10, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass.

This issue affects Aybs Interaktif: from 2024 through 28082025.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-732 · Incorrect Permission Assignment for Critical Resource; CWE-862 · Missing Authorization; CWE-863 · Incorrect Authorization
Published
2025-10-10T18:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0329 · [email protected]
EPSS history
Timeline
  • 10 OCT 13:48Z
    Authorization Bypass in Usta Information Systems' Aybs Interaktif
    cvelistv5