Vulnerability · Published Oct 24, 2025 · Assigned by TR-CERT

CVE-2025-11145User Enumeration in CBK Soft's enVision

High 7.5

In plain English

A high-severity information exposure in enVision from CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 72.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting. This issue affects enVision: before 250566.

Affected products (as reported)

Vendor	Product	Versions
CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc.	enVision	0 – before 250566

Weakness: CWE-203, CWE-200, CWE-359 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://www.usom.gov.tr/bildirim/tr-25-0361 government-resource, broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361 government-resource