EUVD-2026-67001
GHSA-f62f-53rw-qpmv
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Network-reachable with no auth or complexity barriers; impact limited to partial integrity and availability with no confidentiality loss per description.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
Lifecycle Timeline
1DescriptionCVE.org
Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects AdisyonPro: before v5.21.0.
AnalysisAI
Authorization bypass via user-controlled key in Summit Security Systems AdisyonPro (all versions before v5.21.0) allows unauthenticated remote attackers to access application functionality that should be restricted by access control lists, resulting in integrity and availability impact. The flaw is classified as CWE-639, an Insecure Direct Object Reference (IDOR)-class weakness in which the application accepts user-supplied keys to gate access to protected resources without adequate server-side authorization validation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication is required; the CVSS vector AV:N/AC:L/PR:N/UI:N confirms remote unauthenticated exploitation against network-accessible AdisyonPro instances. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.5 (Medium) reflects a network-accessible, low-complexity, unauthenticated attack path with partial integrity and availability impact but no confidentiality loss. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to upgrade AdisyonPro to version v5.21.0 or later, which resolves the authorization bypass per the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0917. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today