CVE-2025-6967

HIGH EPSS 35.9%

Published Feb 10, 20264mo ago · Modified Jun 17, 20262w ago

8.7 CVSS 3.1

High

Published Feb 10, 2026 4mo ago

Last Modified Jun 17, 2026 2w ago

Description

Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass. This issue affects CMS: through 10022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Details

Base Score

8.7

Exploitability

2.2

Impact

5.8

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity High

Availability None

Threat Intelligence

EPSS Exploit Probability

35.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-698

References 2

siberguvenlik.gov.tr https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0050
usom.gov.tr https://www.usom.gov.tr/bildirim/tr-26-0050

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.