PT-2026-4350 · Tap&Sign · Tap&Sign

Berat Arslan · Published 2026-01-23 · Updated 2026-01-23 · CVE-2025-2204

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tap&Sign versions through 23012026

Description Tap&Sign software contains a flaw related to improper input neutralization during web page generation, potentially leading to Cross-Site Scripting (XSS). The vendor was contacted regarding this issue but did not respond.

Recommendations Update Tap&Sign to a version later than 23012026.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-2204

Affected Products

Tap&Sign

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-2204 · Security Note
• https://twitter.com/CVEnew/status/2014706929470161256 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0004 · Note
• https://t.me/cveNotify/149666 · Telegram Post