CVE-2026-111552
Received
Received - Intake
Authentication Bypass in Hyper E-Commerce Infrastructure
Vulnerability report for CVE-2026-111552, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-12
Last updated on: 2026-11-12
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Εti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Εti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Εti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass.
This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Hyper Teknoloji Ltd. Εti. | Hyper E-Commerce Infrastructure | From 0 (inc) to 1.1 (exc) |
| Hyper Teknoloji Ltd. Εti. | Hyper E-Commerce Infrastructure - dealer integration | From 0 (inc) to 1.2 (exc) |
| Hyper Teknoloji Ltd. Εti. | Hyper E-Commerce Infrastructure - Storefront application and management panel | From 0 (inc) to 2.1796 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-308 | The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor. |