SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-7484

MEDIUM · CVSS 5.3 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-07-24 · Last synced 2026-08-23

CyberRota Analysis

AI-Generated

A vulnerability in ABIS Technology Ltd. Co. AVESİS allows external control over assumed-immutable web parameters, potentially enabling unauthorized access to functionalities that are not properly constrained by Access Control Lists (ACLs). This could lead to privilege escalation or unauthorized data access. Organizations using affected versions of AVESİS should prioritize remediation to mitigate potential security risks.

CVE
CVE-2026-7484
Severity
MEDIUM
CVSS
5.3
EPSS
0.20%

Original NVD Description

External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646.