Paper/Archive/CVE-2025-8668

CVE-2025-8668

E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard — Reflected XSS in E-Kalite Software Hardware Engineering's Turboard

EPSS 0.4%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 35.6.356 × 207.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard allows Reflected XSS. This issue affects Turboard: from 2025.07 before 2026.02. NOTE: This CVE record updated after the vendor implemented mitigations.

Affected

ProductAffectedFixed inSource

Turboard2025.07 – < 2026.022026.02CNA

Scores by source

TR-CERT (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-26-0060 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0060