Authorization Bypass in BAPSİS by ABIS Technology Ltd. Co.
CVE-2026-6001

8.8HIGH

Key Information:

Vendor

Abis Technology Ltd. Co.

Status
Bapsi̇s
Vendor
CVE Published:
12 May 2026

What is CVE-2026-6001?

An authorization bypass vulnerability has been identified in BAPSİS by ABIS Technology Ltd. Co., which allows users to exploit trusted identifiers through user-controlled keys. This issue poses significant security risks prior to version 202604152042, potentially permitting unauthorized access and manipulation of sensitive data.

Affected Version(s)

BAPSİS 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tolga DEMİREL
.