Vulnerabilities

TI-2026-69423 CVE-2026-19218 · GHSA-m33r-p2j3-r4pf

Password reset codes in AKIN MyRezzta can be brute forced

MEDIUM 47

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00232 Published 2026-10-08 Fixed in 2.07.01 CWE-640

TI-2026-69468 CVE-2026-92555

Database credentials exposed in AKINSOFT WOLVOX Control Panel

MEDIUM 49

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00373 Published 2026-10-08 Fixed in 26.02.26 CWE-201

TI-2026-69422 CVE-2026-19083

AKIN OctoCloud authorization bypass exposes restricted functions

MEDIUM 40

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00246 Published 2026-10-08 Fixed in 1.12.07 CWE-639

TI-2026-13115 CVE-2026-15585 · GHSA-825w-c5j5-75vm

Path Traversal in AKIN Software's Wolvox9 ERP

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-08-18 Fixed in 26.02.22 CWE-22

TI-2026-09321 CVE-2026-10857 · GHSA-ch8h-w2pf-cfh9

Reflected XSS in Akinsoft's e-Commerce

LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-06-23 Fixed in 1.25.01.06 CWE-79

TI-2026-09209 CVE-2026-10711 · GHSA-72hx-6mcj-jmr2

RCE in Akınsoft's CafePlus

MEDIUM 40

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00366 Published 2026-06-23 Fixed in 12.05.04 CWE-306

TI-2025-09087 CVE-2025-9902 · GHSA-m54m-46hr-w2r5

IDOR in Akınsoft QRMenu