CVE-2025-8886

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass. This issue affects Aybs Interaktif: from 2024 through 28082025.

CVSS 3.1

6.7CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-25)

CWEs

CWE-200, CWE-732, CWE-862, CWE-863

Published

2025-10-10

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0329
• https://www.usom.gov.tr/bildirim/tr-25-0329

Check your stackJSON