CVE-2025-4319

Improper Access Control in Birebirsoft's Sufirmam

State: Published
Severity: 9.4 Critical
Published: Jan 23, 2026
Updated: Jun 5, 2026
Reserved: May 5, 2025

Description

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation.

This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS	Score	Vector	Source
3.1	9.4 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H	TR-CERT

Weaknesses

CWE-307 Improper Restriction of Excessive Authentication Attempts
CWE-640 Weak Password Recovery Mechanism for Forgotten Password

Affected Products

Product	Versions
SufirmamBirebirsoft Software and Technology Solutions	23012026 and earlierAffected

References

https://www.usom.gov.tr/bildirim/tr-26-0005government-resourcebroken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0005government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.