CVE-2025-10465

Published: Feb 9, 2026Modified: Jun 5, 2026Deferred

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: iletisim@usom.gov.tr (Secondary)

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server. This issue affects Sensaway: through 09022026. NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0022

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-26-0022

Source: iletisim@usom.gov.tr

Timeline

No history available yet.