CVE-2025-8886

MEDIUM EPSS 4.8%

Published Oct 10, 20258mo ago · Modified Jun 17, 20261w ago

6.7 CVSS 3.1

Medium

Published Oct 10, 2025 8mo ago

Last Modified Jun 17, 2026 1w ago

Description

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass. This issue affects Aybs Interaktif: from 2024 through 28082025.

CVSS Details

Base Score

6.7

Exploitability

1.4

Impact

5.2

Vector string

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector Local

Attack Complexity High

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability None

Threat Intelligence

EPSS Exploit Probability

4.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 4

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

CWE-732

CWE-862 Missing Authorization Authorization

CWE-863 Incorrect Authorization Authorization

References 2

siberguvenlik.gov.tr https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329
usom.gov.tr https://www.usom.gov.tr/bildirim/tr-25-0329

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.