Vulnerability · Published Oct 8, 2026 · Assigned by TR-CERT

CVE-2026-92555Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel

Critical 9.8

In plain English

A critical-severity security flaw in AKINSOFT WOLVOX Control Panel from AKIN Software Computer Import-Export Industry and Trade Co. Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.4%top 68.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26.

Affected products (as reported)

Vendor	Product	Versions
AKIN Software Computer Import-Export Industry and Trade Co. Ltd.	AKINSOFT WOLVOX Control Panel	26.02.25 – before 26.02.26

Weakness: CWE-201 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1273 government-resource