CVE-2025-8886

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass. This issue affects Aybs Interaktif: from 2024 through 28082025.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.4 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329
https://www.usom.gov.tr/bildirim/tr-25-0329

Configurations

No configuration.

History

30 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Asignación Incorrecta de Permisos para Recurso Crítico, Exposición de Información Sensible a un Actor No Autorizado, Falta de autorización, vulnerabilidad de Autorización Incorrecta en Usta Information Systems Inc. Aybs Interaktif permite Abuso de Privilegios, omisión de autenticación. Este problema afecta a Aybs Interaktif: desde 2024 hasta 28082025.

Information

Published : 2025-10-10 14:15

Updated : 2026-10-08 13:10

NVD link : CVE-2025-8886

Mitre link : CVE-2025-8886

CVE.ORG link : CVE-2025-8886

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-732

Incorrect Permission Assignment for Critical Resource

CWE-862

Missing Authorization

CWE-863

Incorrect Authorization

{"id": "CVE-2025-8886", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8886", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-10T19:11:06.756821Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.4}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Usta Information Systems Inc.", "product": "Aybs Interaktif", "versions": [{"status": "affected", "version": "2024", "versionType": "custom", "lessThanOrEqual": "28082025"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-10T14:15:43.860", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0329", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-732"}, {"lang": "en", "value": "CWE-862"}, {"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass.\n\nThis issue affects Aybs Interaktif: from 2024 through 28082025."}, {"lang": "es", "value": "Asignaci\u00f3n Incorrecta de Permisos para Recurso Cr\u00edtico, Exposici\u00f3n de Informaci\u00f3n Sensible a un Actor No Autorizado, Falta de autorizaci\u00f3n, vulnerabilidad de Autorizaci\u00f3n Incorrecta en Usta Information Systems Inc. Aybs Interaktif permite Abuso de Privilegios, omisi\u00f3n de autenticaci\u00f3n. Este problema afecta a Aybs Interaktif: desde 2024 hasta 28082025."}], "lastModified": "2026-10-08T13:10:00.200", "sourceIdentifier": "iletisim@usom.gov.tr"}