Weak Password Recovery Mechanism in Birebirsoft Sufirmam Affects Security
CVE-2025-4319

9.4CRITICAL

Key Information:

Vendor

Birebirsoft Software And Technology Solutions

Status
Sufirmam
Vendor
CVE Published:
23 January 2026

What is CVE-2025-4319?

Birebirsoft Software and Technology Solutions' product Sufirmam is susceptible to vulnerabilities due to an improper restriction of excessive authentication attempts and a weak password recovery mechanism. This flaw can be exploited through brute force attacks, allowing unauthorized users to potentially gain access to sensitive data. Despite early notification to the vendor, there was no response, leaving users at risk until the issue is addressed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Sufirmam 0 <= 23012026

References

https://www.usom.gov.tr/bildirim/tr-26-0005

CVSS V3.1

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HĂĽseyin ĂśZĂśM
JSON
.