CVE-2026-80444: Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS
Published Sep 23, 2026
·Updated
URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation.
This issue affects AVESİS: from 202608201331 before 202608240351.
Affected Software
1 affected component
Abis Technology AVESİS>=202608201331<202608240351
Event History
Sep 23, 2026
CVE Published
via MITRE·11:42 AM
Data Sourced
via MITRE·11:42 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which AVESİS deployments are affected?
The issue affects AVESİS versions from 202608201331 up to, but not including, 202608240351.
2
What does an attacker need to exploit this issue?
The vulnerability is remotely reachable and requires no authentication or privileges. Exploitation requires user interaction, meaning a user must follow or otherwise trigger a crafted redirect.
3
What is the security impact of successful exploitation?
Successful exploitation can redirect users to an untrusted site through input manipulation. The listed impact includes low confidentiality and integrity impact, with no availability impact.