Improper Authentication Control in Akinsoft MyRezzta's Security
CVE-2025-1740

9.8CRITICAL

Key Information:

Vendor

Akinsoft

Status
Myrezzta
Vendor
CVE Published:
3 September 2025

What is CVE-2025-1740?

A vulnerability exists in Akinsoft MyRezzta that permits attackers to exploit improper restrictions on excessive authentication attempts. This flaw can potentially enable unauthorized access through authentication bypass, allowing attackers to carry out brute force attacks aimed at recovering passwords. The affected versions are from s2.03.01 up to, but not including, v2.05.01. Consequently, it is crucial for users to update to the latest version to safeguard against potential security issues associated with this vulnerability.

Affected Version(s)

MyRezzta s2.03.01

References

https://www.usom.gov.tr/bildirim/tr-25-0205

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.
CVE-2025-1740 : Improper Authentication Control in Akinsoft MyRezzta's Security