PT-2026-7577 · Dinosoft Business Solutions · Dinosoft Erp

Mustafa Günel · Published 2026-02-11 · Updated 2026-02-11 · CVE-2025-8025

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dinosoft ERP versions prior to 3.0.1 through 11022026

Description An issue exists in Dinosoft Business Solutions Dinosoft ERP related to missing authentication for a critical function and improper access control. This allows access to functionality that is not properly constrained by Access Control Lists (ACLs).

Recommendations Update Dinosoft ERP to version 3.0.1 or later.

Fix

Missing Authentication

Improper Access Control

Weakness Enumeration

CWE-306

CWE-284

Related Identifiers

CVE-2025-8025

Affected Products

Dinosoft Erp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-8025 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0059 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0059 · Note
• https://twitter.com/TheHackerWire/status/2021579717657444589 · Twitter Post
• https://twitter.com/CveFindCom/status/2021648273274982762 · Twitter Post