Server-Side Request Forgery Vulnerability in Okulistik by Teknolist Computer Systems
CVE-2025-11242

9.8CRITICAL

Key Information:

Vendor

Teknolist Computer Systems Software Publishing Industry And Trade Inc.

Status
Okulistik
Vendor
CVE Published:
10 February 2026

What is CVE-2025-11242?

An SSRF vulnerability exists in Okulistik, a software solution developed by Teknolist Computer Systems. This vulnerability allows an attacker to send crafted requests from the server-side, potentially exposing sensitive internal resources or services. If exploited, this could lead to unauthorized access or data leakage, emphasizing the need for timely mitigation and security measures within the affected systems.

Affected Version(s)

Okulistik 0 <= 21102025

References

https://www.usom.gov.tr/bildirim/tr-26-0048
third-party-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.