What is the CVSS score of EUVD-2026-48569?

EUVD-2026-48569 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-48569?

Yes, a patch is available for EUVD-2026-48569. Update the affected software to the latest version immediately.

Avesi S EUVD-2026-48569

| CVE-2026-7484 MEDIUM

External Control of Assumed-Immutable Web Parameter (CWE-472)

2026-07-24 TR-CERT

GHSA-cgh2-9783-hgw6

Information Disclosure Avesi S

5.3

CVSS 3.1 · Vendor: TR-CERT

Severity by source

Vendor (TR-CERT) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from Vendor (TR-CERT) · only source for this CVE.

CVSS VectorVendor: TR-CERT

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 12:19 vuln.today

Patch available

Jul 24, 2026 - 14:32 EUVD

DescriptionCVE.org

External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects AVESİS: before 202606251646.

AnalysisAI

Information disclosure in ABIS Technology's AVESİS software allows unauthenticated remote attackers to bypass ACLs and access restricted functionality via manipulated web parameters. Affected versions prior to build 202606251646. Exploitation likelihood is low (EPSS 0.2%), no active exploitation is known, and a vendor patch is available.