CVE-2025-9342

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - iletisim@usom.gov.tr

Published

2025-09-23

Last modified

2026-10-11

Weaknesses

CWE-639

Affected products

• Ahe Mobile (Anadolu Hayat Emeklilik Inc.)

References

• https://www.usom.gov.tr/bildirim/tr-25-0287
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0287