What’s Vulnerable › Vulnerabilities

CVE-2025-11151: Information Disclosure in Beyaz Computer's CityPLus

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-21 · updated 2026-10-08
• Weakness: CWE-200

Description

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before V24.29500.1.0.

Affected products

• Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus: before V24.29500.1.0 — fixed in V24.29500.1.0

How to fix

Upgrade to a fixed version: Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus V24.29500.1.0. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0351
• https://www.usom.gov.tr/bildirim/tr-25-0351

Get alerted when CVE-2025-11151 or the next vulnerability affects your stack