Vulnerability details
CVE-2025-10465
Birtech Information Technologies Industry and Trade Sensaway
Unrestricted File Upload in Birtech Information Technologies' Sensaway
CVSS 3.1
8.8High
Official description
Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server. This issue affects Sensaway: through 09022026. NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (TR-CERT) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Birtech Information Technologies Industry and Trade Ltd. Co. | Sensaway | v ≤ 09022026 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://www.usom.gov.tr/bildirim/tr-26-0022 government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0022 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-02-09
- Last updated
- 2026-06-05
- State
- Published
- Assigner (CNA)
- TR-CERT
Exploit prediction (EPSS)
0.42%
Probability of exploitation in 30 days
36.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-434Unrestricted Upload of File with Dangerous Type