CVE-2026-15575

Published: Oct 16, 2026Modified: Oct 16, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: iletisim@usom.gov.tr (Secondary)

Description

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349

Source: iletisim@usom.gov.tr

Timeline

No history available yet.