PT-2025-43509 · Unknown · Arksigner Acbakimzala

Barış Baydur + 1 · Published 2025-10-23 · Updated 2025-10-28 · CVE-2025-11023

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ArkSigner AcBakImzala versions prior to 5.1.4

Description The software contains a PHP Local File Inclusion issue due to improper control of filename inclusion mechanisms. This allows for the inclusion of files from untrusted sources. The issue affects the AcBakImzala software.

Recommendations Update to version 5.1.4 or later.

Fix

Weakness Enumeration

CWE-98

CWE-829

Related Identifiers

CVE-2025-11023

Affected Products

Arksigner Acbakimzala

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-11023 · Security Note
• https://twitter.com/0dayPublishing/status/1981343450566983763 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0356 · Note
• https://twitter.com/cracbot/status/1983126642727006533 · Twitter Post
• https://twitter.com/CveFindCom/status/1981347414993707416 · Twitter Post
• https://twitter.com/CVEnew/status/1981359018942554220 · Twitter Post
• https://twitter.com/CveTodo/status/1981352036747657467 · Twitter Post
• https://t.me/CVEtracker/35568 · Telegram Post