Weak Password Recovery Mechanism in Hyper Teknoloji's E-Commerce Infrastructure
CVE-2026-110951

7.5HIGH

Key Information:

Vendor

Hyper Teknoloji Ltd. Şti.

Status
Hyper E-commerce Infrastructure
Hyper E-commerce Infrastructure - Dealer Integration
Hyper E-commerce Infrastructure - Storefront Application And Management Panel
Vendor
CVE Published:
12 November 2026

What is CVE-2026-110951?

A security vulnerability exists within Hyper Teknoloji's E-Commerce Infrastructure, affecting its password recovery mechanism for users who have forgotten their passwords. This flaw allows attackers to exploit the system, potentially enabling unauthorized access to user accounts. The vulnerability impacts multiple components of the E-Commerce platform, including the dealer integration and Storefront management panel, particularly versions prior to specified releases. Users are advised to upgrade to the latest versions to fortify their security against potential exploitation.

Affected Version(s)

Hyper E-Commerce Infrastructure 0 < 1.1

Hyper E-Commerce Infrastructure - dealer integration 0 < 1.2

Hyper E-Commerce Infrastructure - Storefront application and management panel 0 < 2.1796

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berk Erenmemiş
.