CVE-2026-7484
Received Received - Intake

External Control of Assumed-Immutable Parameter in AVESİS

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-7484
EUVD
EUVD-2026-48569

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
abis_technology_ltd_co avesis to 202606251646 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-472 The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an external attacker to manipulate web parameters in ABIS Technology Ltd. Co. AVESİS that are assumed to be immutable. This can lead to unauthorized access to functionality that should be restricted by Access Control Lists (ACLs).

Impact Analysis

An attacker could exploit this to access sensitive features or data in AVESİS that are not properly protected by ACLs. This may result in unauthorized actions, data exposure, or system misuse.

Compliance Impact

The vulnerability allows external control of web parameters, potentially leading to unauthorized access to functionality not properly constrained by ACLs. This could result in data exposure or manipulation, which may violate compliance requirements for GDPR (data protection) and HIPAA (healthcare data privacy) if sensitive data is involved.

Mitigation Strategies

Update AVESİS to version 202606251646 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart