TI-2025-09327 Aliases CVE-2025-10161 GHSA-pg9g-332m-ffgw

Authentication Bypass in Turkguven's Perfektive

LOW 38CWE-307Published 2025-11-11 · Updated 2026-06-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-307.

Summary

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0029 21st percentileScored 2026-11-07

Fix Fixed Perfektive (Turkguven Software Technologies Inc.): Version: 12574 Build: 2701

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Turkguven Software Technologies Inc.	Perfektive	before Version: 12574 Build: 2701	Version: 12574 Build: 2701	Patch available	CNA

Perfektive VendorTurkguven Software Technologies Inc. Affected before Version: 12574 Build: 2701 Fixed in Version: 12574 Build: 2701 Patch available CNA

Remediation

Fix · CNA Perfektive (Turkguven Software Technologies Inc.) Fixed in Version: 12574 Build: 2701

Timeline

2026-10-02 Threatist record created from CVE-2025-10161
2026-10-03 Alias added: GHSA-pg9g-332m-ffgw

References

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences