CVE-2025-4320
Information Disclosure in Birebirsoft's Sufirmam
- State
- Published
- Severity
- 10.0 Critical
- Published
- Jan 23, 2026
- Updated
- Jun 5, 2026
- Reserved
- May 5, 2025
Description
Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation.
This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 10.0 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | TR-CERT |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
SufirmamBirebirsoft Software and Technology Solutions |
|
References
- https://www.usom.gov.tr/bildirim/tr-26-0005government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0005government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.