CVE-2024-4259

6.9 mediumEPSS 0.5%

Medium (6.9) in sambas akos. EPSS 0.5% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in SAMPAŞ Holding AKOS (AkosCepVatandasService), SAMPAŞ Holding AKOS (TahsilatService) allows Collect Data as Provided by Users. This issue affects AKOS (AkosCepVatandasService): before V2.0; AKOS (TahsilatService): before V1.0.7.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2024-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sambas:akos

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1377
https://www.usom.gov.tr/bildirim/tr-24-1377

Check your stack JSON