CVE-2025-7708

6.8 mediumEPSS 0.3%

Medium (6.8). EPSS 0.3% chance of exploitation in the next 30 days.

Insertion of Sensitive Information Into Sent Data vulnerability in Atlas Educational Software Industry Ltd. Co. K12net allows Communication Channel Manipulation. This issue affects k12net: through 26072025.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-201
Published: 2026-02-09
Modified: 2026-08-13
Record from: the NVD, synced 2026-10-19

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0021
https://www.usom.gov.tr/bildirim/tr-26-0021

Check your stack JSON