CVE-2025-10161

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

Score

CVSS 3.1 7.3 High

Status

Deferred - iletisim@usom.gov.tr

Published

2025-11-11

Last modified

2026-10-18

Weaknesses

CWE-307, CWE-602, CWE-807

Affected products

• Perfektive (Turkguven Software Technologies Inc.)

References

• https://www.usom.gov.tr/bildirim/tr-25-0387
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387