CVE-2025-7799Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected XSS. This issue affects e-Taxpayer Accounting Website: through 07082025.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-02-09: 4Patch / Workaround · 2026-02-09: 1Technical Details · 2026-02-09: 402-09
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets5 URLs
Full discourse4 posts
  • CVE@CVEnew
    General

    CVE-2025-7799 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting W… https://www.cve.org/CVERecord?id=CVE-2025-7799

    Post summary

    The statement merely references CVE‑2025‑7799 with its XSS classification, offering no evidence of PoC, exploit, active use, patch, or debunking.

    00010318
    56.5K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2025-7799: HIGH] Critical XSS vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website exposes users to attacks. Update your systems by 07/08/2025 to stay protected.#cve,CVE-2025-7799,#cybersecurity https://cvefind.com/CVE-2025-7799

    Post summary

    The post announces CVE‑2025‑7799 as a critical XSS flaw in a specific website and urges users to apply a patch by 07/08/2025.

    0000079
    583 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-7799 Reflected XSS in Zirve Information Technologies E-Taxpayer Account... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-7799 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The tweet announces CVE‑2025‑7799, a Reflected XSS issue in Zirve Information Technologies E‑Taxpayer Account, and links to a vulnerability details page.

    0000051
    4.0K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2025-7799 - High Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected ... https://www.thehackerwire.com/vulnerability/CVE-2025-7799/ https://t.co/Dwhzx8mvMo

    Post summary

    The tweet discloses CVE-2025-7799 as a high‑severity XSS vulnerability affecting the Zirve E‑Taxpayer Accounting Website, without providing PoC, exploit, or patch details.

    0000096
    112 followersView on X

Explore more