What’s Vulnerable › Vulnerabilities

CVE-2025-11959: Improper Access Control in Premierturk's Excavation Management Information System

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-11 · updated 2026-10-18
• Weakness: CWE-359

Description

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse. This issue affects Excavation Management Information System: before v.10.2025.01.

Affected products

• Premierturk Information Technologies Inc. Excavation Management Information System: before v.10.2025.01 — fixed in v.10.2025.01

How to fix

Upgrade to a fixed version: Premierturk Information Technologies Inc. Excavation Management Information System v.10.2025.01. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0388
• https://www.usom.gov.tr/bildirim/tr-25-0388

Get alerted when CVE-2025-11959 or the next vulnerability affects your stack