Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. vulnerabilities
Published CVEs affecting Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-6967
High · 8.7
CWE-698 Feb 10, 2026
Authentication Bypass in Sarman Soft's CMS
Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass.
This issue affects CMS: through 10022026.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.