Approved changes feed: RSS · Atom

cpe:2.3:a:sarman_soft_software_and_technology_services_industry_and_trade_ltd._co.:cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSarman Soft Software And Technology Services Industry And Trade Ltd. Co. (9016b0db-508d-53ff-9ec8-43eb4611536c)
ProductCms (feb4a844-0e00-59d2-98d0-515ac2aa6374)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6967 vulnerable 2026-06-08 07:43:16.768283 Authentication Bypass in Sarman Soft's CMS
HIGH (8.7)
Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass. This issue affects CMS: through 10022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-10T13:43:37.928Z
Updated: 2026-06-05T13:55:49.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.