PT-2026-3927 · Solvera Software Services Trade · Teknoera

Published 2026-01-22 · Updated 2026-01-22 · CVE-2025-10855

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Teknoera versions through 01102025

Description An authorization bypass exists in Solvera Software Services Trade Inc. Teknoera due to a vulnerability related to user-controlled keys and exploitation of trusted identifiers. The issue allows unauthorized access. The API endpoints and vulnerable parameters are not specified.

Recommendations Versions through 01102025 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-10855

Affected Products

Teknoera

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-10855 · Security Note
• https://t.me/CVEtracker/42778 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0003 · Note
• https://t.me/cveNotify/149532 · Telegram Post