Authentication Bypass Vulnerability in IDM-MFA by Magarsus Consulting Ltd.
CVE-2026-4773

8.1HIGH

Key Information:

Vendor

Magarsus Consulting Ltd. Co.

Status
Idm-mfa
Vendor
CVE Published:
22 July 2026

What is CVE-2026-4773?

An improper validation of specified types of input in IDM-MFA by Magarsus Consulting Ltd. allows unauthorized users to bypass authentication mechanisms, potentially compromising the security of user accounts and sensitive data. This vulnerability affects versions of the product released from November 27, 2025, until March 10, 2026, highlighting the critical need for users to apply necessary patches and updates to safeguard their systems.

Affected Version(s)

IDM-MFA 2025.11.27 < 2026.03.10

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anıl KIZILTAN
.