CVE-2026-80444 PUBLISHED

Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS

Assigner: TR-CERT
Reserved: 26.08.2026 Published: 23.09.2026 Updated: 23.09.2026

URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation.

This issue affects AVESİS: from 202608201331 before 202608240351.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS Score: 5.4

Product Status

Vendor Abis Technology Ltd. Co.
Product AVESİS
Versions Default: unaffected
  • affected from 202608201331 to 202608240351 (excl.)

Credits

  • Hasan Hüseyin UYAR finder

References

Problem Types

  • CWE-601 URL redirection to untrusted site ('open redirect') CWE

Impacts

  • CAPEC-153 Input Data Manipulation