PT-2026-7085 · Zirve Information Technologies · E-Taxpayer Accounting Website

Çetin Bi̇ni̇ci̇ · Published 2026-02-09 · Updated 2026-02-09 · CVE-2025-7799

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Zirve Information Technologies Inc. E-Taxpayer Accounting Website versions through 07082025

Description The E-Taxpayer Accounting Website contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. The issue impacts the web application and could potentially allow an attacker to inject malicious code.

Recommendations Versions through 07082025 should be updated or patched as soon as possible.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-7799

Affected Products

E-Taxpayer Accounting Website

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-7799 · Security Note
• https://twitter.com/VulmonFeeds/status/2020919899338535195 · Twitter Post
• https://twitter.com/CveFindCom/status/2020923487704006803 · Twitter Post
• https://twitter.com/TheHackerWire/status/2020789682020467030 · Twitter Post
• https://t.me/cveNotify/151379 · Telegram Post
• https://twitter.com/CVEnew/status/2020780956857012617 · Twitter Post
• https://t.me/CVEtracker/44182 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0019 · Note