← Vulnerability feed

Vulnerability record · CVE-2025-10161 · published 11 November 2025

CVE-2025-10161: Improper restriction of authentication attempts vulnerability

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

7.3 CVSS 3.1 High EPSS 0.27% · top 82.1% CWE-307 · Improper restriction of authentication attemptsCWE-602 · CWE-602 Deferred
7.3CVSS 3.1 base score
0.27%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

LinkTags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387
https://www.usom.gov.tr/bildirim/tr-25-0387

Track CVE-2025-10161 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2025-10161), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.