PT-2025-41566 · Quest Information Systems · Aybs Interaktif

CVE-2025-8887 · Published 2025-10-10 · Updated 2025-10-10

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025

Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of sensitive information. This allows for forceful browsing, parameter injection, and manipulation of input data.

Recommendations Apply updates to address the authorization issues in versions 2024 through 28082025.

Fix

IDOR

Information Disclosure

Missing Authorization

Weakness Enumeration

CWE-639

CWE-200

CWE-862

Related Identifiers

CVE-2025-8887

Affected Products

Aybs Interaktif

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-8887 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329 · Note
• https://t.me/CVEtracker/34593 · Telegram Post
• https://twitter.com/CVEnew/status/1976652821954003434 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0329 · Note