CVE-2025-8886 describes a set of authorization and permission assignment flaws in Aybs Interaktif by Usta Information Systems Inc. These flaws include incorrect permission assignment (CWE-732), exposure of sensitive information to unauthorized actors (CWE-200), missing authorization (CWE-862), and incorrect authorization (CWE-863). The vulnerability allows attackers to abuse privileges and bypass authentication mechanisms. It affects the 2024 version of the product and has a medium severity rating with a CVSS score of 6.7. No patch or official remediation guidance is currently provided, and no exploits are known in the wild.

The vulnerability can lead to unauthorized access to sensitive information and allow attackers to bypass authentication controls or abuse privileges within the affected product. This could compromise confidentiality and integrity of data but does not impact availability. The medium CVSS score reflects the significant confidentiality and integrity impact but requires local attack vector with high attack complexity and no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor Usta Information Systems Inc. advisories closely. Until a fix is released, restrict access to the affected version and apply any recommended configuration changes from the vendor to limit exposure.