{"id":"CVE-2025-8887","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-8887","generatedAt":"2026-10-28T02:12:17.218Z","title":"Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc.","description":"Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation.\n\nThis issue affects Aybs Interaktif: from 2024 through 28082025.","published":"2025-10-10T14:15:44.000Z","lastModified":"2026-10-08T13:10:00.000Z","status":"Deferred","sourceIdentifier":"iletisim@usom.gov.tr","cvss":{"version":"3.1","score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"},"cwe":["CWE-200","CWE-639","CWE-862"],"affected":[],"epss":{"score":0.00148,"percentile":0.04002,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329","source":"iletisim@usom.gov.tr"},{"url":"https://www.usom.gov.tr/bildirim/tr-25-0329","source":"iletisim@usom.gov.tr"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-8887","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}