CVE-2024-12367: Information Disclosure in Vegagrup Software's Vega Master

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-16 · updated 2026-06-17
Weakness: CWE-497

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Master allows Directory Indexing. This issue affects Vega Master: from v.1.12.35 through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

Affected products

Vegagrup Software Vega Master: from v.1.12.35 through 20250916

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0249
https://www.usom.gov.tr/bildirim/tr-25-0249

Get alerted when CVE-2024-12367 or the next vulnerability affects your stack