CVE-2026-15585 PUBLISHED

Path Traversal in AKIN Software's Wolvox9 ERP

Assigner: TR-CERT
Reserved: 13.07.2026 Published: 18.08.2026 Updated: 18.08.2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal.

This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	AKIN Software Computer Import Export Industry and Trade Ltd.
Product	AKINSOFT Wolvox9 ERP / KontrolPanel.exe
Versions	Default: unaffected affected from s26.02.17 to 26.02.22 (excl.)

Credits

Eren Can ÖZMEN finder

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0851

Problem Types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE

Impacts

CAPEC-126 Path Traversal