PT-2026-7244 · Okulistik · Okulistik

Berat Arslan · CVE-2025-11242 · Published 2026-02-10 · Updated 2026-02-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Okulistik versions through 21102025

Description The software contains a Server-Side Request Forgery (SSRF) vulnerability that allows Server Side Request Forgery. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to make requests to unintended locations.

Recommendations Versions through 21102025 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-11242

Affected Products

Okulistik

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-11242 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0048 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0048 · Note
• https://t.me/CVEtracker/44285 · Telegram Post
• https://twitter.com/TheAlphaEvents/status/2021234297621877171 · Twitter Post
• https://twitter.com/CveFindCom/status/2022373043343929657 · Twitter Post
• https://t.me/cveNotify/151528 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021157964606759058 · Twitter Post
• https://twitter.com/TheHackerWire/status/2021160207024521390 · Twitter Post