VULNERABILITY INTELLIGENCE

CVE-2025-11954

CVSS score8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-05-20
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Cross-Site request forgery (CSRF) vulnerability in Sitemio Information Technologies Trade Ltd. Co. WISECP allows Cross Site Request Forgery. This issue affects WISECP: through 20022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Weakness classification

  • iletisim@usom.gov.tr: CWE-352

Primary references