Vulnerability · Published Feb 25, 2026 · Assigned by TR-CERT
CVE-2026-2624Authentication Bypass in ePati's Antikor NGFW
Critical 9.8
In plain English
A critical-severity missing authentication in Antikor Next Generation Firewall (NGFW) from ePati Cyber Security Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.3%top 17.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass. This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ePati Cyber Security Technologies Inc. | Antikor Next Generation Firewall (NGFW) | v.2.0.1298 – before v.2.0.1301 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.usom.gov.tr/bildirim/tr-26-0082 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082 government-resource