CVE-2026-10711CWE-306

RCE in Akınsoft's CafePlus

High · published June 23, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects CafePlus: from 12.05.03 before 12.05.04.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-06-23T12:08Z
EPSS history
Timeline
  • 23 JUN 12:08Z
    RCE in Akınsoft's CafePlus
    cvelistv5