CVE-2025-6967

HIGH

Authentication Bypass in Sarman Soft's CMS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-6967 has a selected CVSS score of 8.7 (high).

Description

Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass. This issue affects CMS: through 10022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 10, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

CMS

Browse Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. / CMS

Default status: unknown

CVE ListThrough 10022026affected

References

3