CVE-2025-8884

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8884
Authorization Bypass Through User-Controlled Key vulnerability in VHS Electronic Software Ltd. Co. ACE Center allows Privilege Abuse, Exploitation of Trusted Identifiers. This issue affects ACE Center: from 3.10.100.1768 before 3.10.161.2255.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0348
https://www.usom.gov.tr/bildirim/tr-25-0348
Configurations

No configuration.

History

08 Oct 2026, 22:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de elusión de autorización mediante clave controlada por el usuario en VHS Electronic Software Ltd. Co. ACE Center permite el abuso de privilegios, la explotación de identificadores de confianza. Este problema afecta a ACE Center: desde 3.10.100.1768 antes de 3.10.161.2255.
Information

Published : 2025-10-20 15:15

Updated : 2026-10-08 22:10

NVD link : CVE-2025-8884

Mitre link : CVE-2025-8884

CVE.ORG link : CVE-2025-8884

JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key