Skip to content
OpenAdvisories
High · 8.8 CVE-2026-10711 EUVD-2026-38426GHSA-72hx-6mcj-jmr2

RCE in Akınsoft's CafePlus

Published Jun 23, 2026 · Updated Jun 23, 2026 · Assigned by TR-CERT

Description

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects CafePlus: from 12.05.03 before 12.05.04.

Affected products

VendorProductAffectedFixed
AKIN Software Computer Import Export Industry and Trade CafePlus 12.05.03 – < 12.05.04 12.05.04

References