VulnerabilityModified

CVE-2026-2624

Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc.

CRITICAL 9.8EPSS 2.19%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass. This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 2.19% probability · 81th percentile
CISA KEV: Not listed
Weakness: CWE-306
Affected: epati/antikor next generation firewall
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082
https://www.usom.gov.tr/bildirim/tr-26-0082Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.