This vulnerability (CVE-2025-9986) in DIGIKENT by Vadi Corporate Information Systems Ltd. Co. involves the exposure of sensitive system information to unauthorized parties, categorized under CWE-497. The CVSS 3.1 base score of 8.2 indicates that the vulnerability can be exploited remotely without authentication or user interaction, leading to a high impact on confidentiality and a low impact on integrity, with no impact on availability. The affected product versions include DIGIKENT up to 13092025. There is no vendor advisory or patch information available at this time, and the product is not a cloud service, so remediation responsibility lies with the user organization.

Successful exploitation could lead to unauthorized disclosure of sensitive system information, potentially aiding attackers in further attacks. The confidentiality impact is high, meaning sensitive data could be exposed. Integrity impact is low, and availability is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently documented, organizations should monitor vendor communications for updates. Until a fix is available, limit exposure of the affected DIGIKENT systems to untrusted networks and apply strict access controls to reduce risk.