CVE-2026-2624

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2624", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-02-17T12:15:11.411Z", "datePublished": "2026-02-25T12:39:47.312Z", "dateUpdated": "2026-06-06T07:53:37.538Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T07:53:37.538Z"}, "title": "Authentication Bypass in ePati's Antikor NGFW", "datePublic": "2026-02-25T12:25:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "product": "Antikor Next Generation Firewall (NGFW)", "versions": [{"status": "affected", "version": "v.2.0.1298", "lessThan": "v.2.0.1301", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.<p>This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.</p>"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-26-0082", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Sad\u0131k ERT\u00dcRK", "type": "finder"}], "source": {"defect": ["TR-26-0082"], "advisory": "TR-26-0082", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-25T15:11:58.714035Z", "id": "CVE-2026-2624", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:12:39.466Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2624", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-25T15:11:58.714035Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:12:14.072Z"}}], "cna": {"title": "Authentication Bypass in ePati's Antikor NGFW", "source": {"defect": ["TR-26-0082"], "advisory": "TR-26-0082", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Sad\u0131k ERT\u00dcRK"}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "product": "Antikor Next Generation Firewall (NGFW)", "versions": [{"status": "affected", "version": "v.2.0.1298", "lessThan": "v.2.0.1301", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-02-25T12:25:00.000Z", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-26-0082", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.", "supportingMedia": [{"type": "text/html", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.<p>This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T07:53:37.538Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2624", "state": "PUBLISHED", "dateUpdated": "2026-06-06T07:53:37.538Z", "dateReserved": "2026-02-17T12:15:11.411Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2026-02-25T12:39:47.312Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Antikor Next Generation Firewall (NGFW)", "vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "versions": [{"lessThan": "v.2.0.1301", "status": "affected", "version": "v.2.0.1298", "versionType": "custom"}]}], "source": "iletisim@usom.gov.tr"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:epati:antikor_next_generation_firewall:*:*:*:*:*:*:*:*", "matchCriteriaId": "959FF153-E879-419E-B290-FC7014AA1D6A", "versionEndExcluding": "2.0.1301", "versionStartIncluding": "2.0.1298", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301."}, {"lang": "es", "value": "Vulnerabilidad de autenticaci\u00f3n faltante para funci\u00f3n cr\u00edtica en el Cortafuegos de Pr\u00f3xima Generaci\u00f3n (NGFW) Antikor de ePati Cyber ??Security Technologies Inc. permite la omisi\u00f3n de autenticaci\u00f3n. Este problema afecta al Cortafuegos de Pr\u00f3xima Generaci\u00f3n (NGFW) Antikor: desde la v.2.0.1298 anterior a la v.2.0.1301."}], "id": "CVE-2026-2624", "lastModified": "2026-06-17T10:31:25.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "iletisim@usom.gov.tr", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2624", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-25T15:11:58.714035Z", "version": "2.0.3"}}]}, "published": "2026-02-25T13:16:05.373", "references": [{"source": "iletisim@usom.gov.tr", "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082"}, {"source": "iletisim@usom.gov.tr", "tags": ["Third Party Advisory"], "url": "https://www.usom.gov.tr/bildirim/tr-26-0082"}], "sourceIdentifier": "iletisim@usom.gov.tr", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "iletisim@usom.gov.tr", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[v.2.0.1298,v.2.0.1301)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Antikor Next Generation Firewall (NGFW)", "source": "cna", "vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc."}, "product": "antikor_next_generation_firewall", "vendor": "epati_cyber_\u200b\u200bsecurity_technologies"}], "created": "2026-02-26T13:18:06.876632+00:00", "updated": "2026-06-18T10:45:03.573683+00:00", "vendors": ["epati_cyber_\u200b\u200bsecurity_technologies", "epati_cyber_\u200b\u200bsecurity_technologies$PRODUCT$antikor_next_generation_firewall"]}