Vulnerability · Published May 21, 2026 · Assigned by TR-CERT
CVE-2025-13477OTP Bypass in Digital Operation Services' WifiBurada
High 7.1
In plain English
A high-severity security flaw in WifiBurada from Digital Operations Services Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in Digital Operations Services Inc. WifiBurada allows Authentication Bypass. This issue affects WifiBurada: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Digital Operations Services Inc. | WifiBurada | 0 – through 21052026 |
Weakness: CWE-359, CWE-522 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0284 government-resource