Vulnerability · Published Sep 23, 2026 · Assigned by TR-CERT
CVE-2026-80444Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS
Medium 5.4
In plain English
A medium-severity open redirect in AVESİS from Abis Technology Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.2%top 84.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Abis Technology Ltd. Co. | AVESİS | 202608201331 – before 202608240351 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1159 government-resource