CVE-2026-111552: Multi-Factor Authentication Bypass in Hyper Technology's Hyper E-Commerce Infrastructure
Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass.
This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.
Event History
Frequently Asked Questions
Which deployments need remediation?
Hyper E-Commerce Infrastructure versions before 1.1, dealer integration versions before 1.2, and Storefront application and management panel versions before 2.1796 are affected. Deployments at or above those versions are not identified as affected by the provided information.
What level of access does an attacker need?
The CVSS vector indicates network-reachable exploitation with low attack complexity, no user interaction, and low privileges required. The issue is an authentication bypass caused by use of single-factor authentication.
What is the potential impact of successful exploitation?
Successful exploitation can result in high confidentiality impact and low integrity impact. The supplied vector indicates no availability impact.