CVE-2026-15575 PUBLISHED

Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

Assigner: TR-CERT
Reserved: 13.07.2026 Published: 16.10.2026 Updated: 16.10.2026

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces.

This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 5.3

Product Status

Vendor SFM Software Technologies Inc.
Product Costifier
Versions Default: unknown
  • affected from 0 to 2026-10-16 (incl.)

Credits

  • Berat ARSLAN finder

References

Problem Types

  • CWE-489 Active debug code CWE

Impacts

  • CAPEC-121 Exploit Non-Production Interfaces