Weak Password Recovery Mechanism in LIBRID/LIBREF by Ankaref Innovation and Technology Inc.
CVE-2026-6285

7.5HIGH

Key Information:

Vendor: Ankaref Innovation And Technology Inc.
Status: Librid/libref
Vendor: CVE Published:; 10 September 2026

🔔 Create Ankaref Innovation And Technology Inc. Vulnerability Alert

What is CVE-2026-6285?

A vulnerability exists in the password recovery process within LIBRID/LIBREF by Ankaref Innovation and Technology Inc. This flaw allows attackers to exploit weak password recovery mechanisms, potentially giving unauthorized users access to sensitive accounts. The issue affects specific versions ranging from 2.01.0.2183 through 10092026. Despite early warnings, the vendor has not provided a response or mitigation strategies.

Affected Version(s)

LIBRID/LIBREF 2.01.0.2183 <= 10092026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 10, 2026
Vulnerability Reserved
Apr 14, 2026

Credit

Ahmet DURMUŞ

CVE-2026-6285 Data

JSON