Multiple Injection Vulnerabilities in Patika Global Technologies HumanSuite
CVE-2025-8276

10CRITICAL

Key Information:

Vendor

Patika Global Technologies

Status
Humansuite
Vendor
CVE Published:
16 September 2025

What is CVE-2025-8276?

Patika Global Technologies' HumanSuite is susceptible to multiple injection vulnerabilities. These issues arise from improper encoding or escaping of output, allowing attackers to manipulate input data and carry out format string injection, reflection injection, and code injection. This vulnerability primarily affects versions of HumanSuite preceding 53.21.0, enabling potential exploitation through malicious inputs that can compromise security and integrity.

Affected Version(s)

HumanSuite 0 < 53.21.0

References

https://www.usom.gov.tr/bildirim/tr-25-0257
third-party-advisory

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Batuhan Asan
.
CVE-2025-8276 : Multiple Injection Vulnerabilities in Patika Global Technologies HumanSuite