CVE-2025-10464
Cleartext password storage in Birtech Information Technologies' Sensaway
- State
- Published
- Severity
- 6.5 Medium
- Published
- Feb 9, 2026
- Updated
- Jun 5, 2026
- Reserved
- Sep 15, 2025
Description
Insecure Storage of Sensitive Information vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Retrieve Embedded Sensitive Data.
This issue affects Senseway: through 09022026.
NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | TR-CERT |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
SensewayBirtech Information Technologies Industry and Trade Ltd. Co. |
|
References
- https://www.usom.gov.tr/bildirim/tr-26-0022government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0022government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.