PT-2026-4353 · Sufirmam · Sufirmam

Hüseyin Üzüm · Published 2026-01-23 · Updated 2026-03-26 · CVE-2025-4320

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sufirmam versions through 23012026

Description A weakness in the password recovery mechanism allows for authentication bypass and password recovery exploitation in Sufirmam. The vendor was contacted regarding this issue but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-640

CWE-305

Related Identifiers

CVE-2025-4320

Affected Products

Sufirmam

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-4320 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0005 · Note
• https://twitter.com/cracbot/status/2016466378325397732 · Twitter Post
• https://twitter.com/CVEnew/status/2014706927368880559 · Twitter Post
• https://twitter.com/0dayPublishing/status/2037075693897449763 · Twitter Post