PT-2025-31096 · Beamsec · Beamsec Phishpro

Directorate General + 1 · CVE-2025-5997 · Published 2025-07-28 · Updated 2025-07-28

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Beamsec PhishPro versions prior to 7.5.4.2

Description An incorrect use of privileged APIs allows for privilege abuse in Beamsec PhishPro.

Recommendations Update Beamsec PhishPro to version 7.5.4.2 or later.

Fix

Weakness Enumeration

CWE-648

Related Identifiers

CVE-2025-5997

Affected Products

Beamsec Phishpro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-5997 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0181 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0181 · Note
• https://twitter.com/CVEnew/status/1949799959337095387 · Twitter Post
• https://t.me/CVEtracker/28571 · Telegram Post
• https://twitter.com/CveFindCom/status/1949796924443246726 · Twitter Post