Authorization Bypass in Teknoera Enables Trusted Identifier Exploitation

Publication date: 2026-01-22

Last updated on: 2026-06-05

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers. This issue affects Teknoera: through 01102025.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-06-05

Generated

2026-07-06

AI Q&A

2026-01-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10855

EUVD

EUVD-2026-4158

Affected Vendors & Products

Vendor	Product	Version / Range
solvera_software_services_trade_inc	teknoera	to 01102025 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability is an Authorization Bypass Through User-Controlled Key in Teknoera software by Solvera Software Services Trade Inc. It allows attackers to exploit trusted identifiers to bypass authorization controls.

Impact Analysis

The vulnerability can lead to unauthorized access to sensitive information or resources because it allows bypassing authorization mechanisms. This could result in data breaches or exposure of confidential data.

Hi! I’m here to help you understand CVE-2025-10855. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70