Abis Technology vulnerabilities
Published CVEs affecting Abis Technology products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-7484
Medium · 5.3
CWE-472 Jul 24, 2026
Improper Access Control in Abis Technology's AVESİS
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects AVESİS: before 202606251646.
CVE-2026-6001
High · 8.8
CWE-639 May 12, 2026
IDOR in Abis Technology's BAPSİS
Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of Trusted Identifiers.
This issue affects BAPSİS: before v.202604152042.
CVE-2025-6520
Critical · 9.8
CWE-89 Oct 31, 2025
SQLi in Abis Technology's BAPSIS
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Abis Technology BAPSIS allows Blind SQL Injection.
This issue affects BAPSIS: before 202510271606.