Active Debug Code Vulnerability in Costifier by SFM Software Technologies Inc.
CVE-2026-15575

5.3MEDIUM

Key Information:

Vendor

Sfm Software Technologies Inc.

Status
Costifier
Vendor
CVE Published:
16 October 2026

What is CVE-2026-15575?

SFM Software Technologies Inc.'s Costifier is impacted by a critical vulnerability that allows unauthorized exploitation of non-production interfaces due to active debug code. This loophole could lead to potential data breaches or unauthorized access, as the debug code provides unintended pathways for attackers. Despite early disclosures, SFM Software Technologies Inc. did not address the issue, raising concerns about the software's security integrity.

Affected Version(s)

Costifier 0 <= 2026-10-16

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.