CVE-2025-8025 - CVE House
Back to Database
Status published Critical CVE-2025-8025

Improper Access Control in Dinosoft Business Solutions' Dinosoft ERP

Vulnerability Description

Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinosoft ERP allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Dinosoft ERP: from < 3.0.1 through 11022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8025

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Mustafa GÜNEL

Affected Vendor

Dinosoft Business Solutions

View all reports →

Affected Software

Dinosoft ERP
Vulnerable Versions:
< 3.0.1

Timeline

Official Publish: February 11th, 2026
Last Modified: June 5th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)