What’s Vulnerable › Vulnerabilities

CVE-2025-7630: OTP Password Brute Forcing in DorukNet's Wispotter

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-18 · updated 2026-06-17
• Weakness: CWE-287

Description

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force. This issue affects Wispotter: from 1.0 before v2025.10.08.1.

Affected products

• Doruk Communication and Automation Industry and Trade Inc. Wispotter: from 1.0 before v2025.10.08.1 — fixed in v2025.10.08.1

How to fix

Upgrade to a fixed version: Doruk Communication and Automation Industry and Trade Inc. Wispotter v2025.10.08.1. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0070
• https://www.usom.gov.tr/bildirim/tr-26-0070

Get alerted when CVE-2025-7630 or the next vulnerability affects your stack