CVE-2025-8887 MEDIUM

CVE-2025-8887: IDOR in Usta Information Systems' Aybs Interaktif

Vendor Usta Information Systems Inc.
Product Aybs Interaktif
Weakness CWE-639 · IDOR
Published October 10, 2025
Last update June 5, 2026
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs Interaktif: from 2024 through 28082025.

Key dates

02Disclosure timeline

October 10, 2025 CVE published
June 5, 2026 Record updated