AKIN Software Computer Import-Export Industry and Trade Co. Ltd. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting AKIN Software Computer Import-Export Industry and Trade Co. Ltd. products: 6 record(s), with severity, exploitation and fixes.

CafePlus 1 e-Commerce 1 MyRezzta 1 AKINSOFT WOLVOX Control Panel 1 OctoCloud 1 AKINSOFT Wolvox9 ERP / KontrolPanel.exe 1

Exploited only (KEV) →

CVE-2026-19218 Critical · 9.1 CWE-640 Oct 8, 2026

Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01.

CVE-2026-92555 Critical · 9.8 CWE-201 Oct 8, 2026

Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26.

CVE-2026-19083 High · 8.8 CWE-639 Oct 8, 2026

IDOR in AKIN Software's OctoCloud

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07.

CVE-2026-15585 High · 7.5 CWE-22 Aug 18, 2026

Path Traversal in AKIN Software's Wolvox9 ERP

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.

CVE-2026-10857 Medium · 6.1 CWE-79 Jun 23, 2026

Reflected XSS in Akinsoft's e-Commerce

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06.

CVE-2026-10711 High · 8.8 CWE-306 Jun 23, 2026

RCE in Akınsoft's CafePlus

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04.