CVE-2025-8350Disclosure

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-306CWE-698

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
3 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

CVETodo@CveTodo231d
Disclosure
**CVE-2025-8350** pertains to a critical security flaw in **Inrove Software and Internet Services BiEticaret CMS**, specifically an **Execution After Redirect (EAR)** combined with **Missing Authentication for Critical Function** vulnerabilities. These issues enable attackers to bypass authentication, perform HTTP response splitting, and potentially execute malicious actions on affected systems. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #AuthBypass #XSS https://cvetodo.com/cve/CVE-2025-8350
Post summary
The post announces CVE-2025-8350 as a critical flaw involving EAR and missing authentication, describing how it enables authentication bypass and HTTP response splitting, but provides no evidence of exploitation, patches, or a PoC.
0000055
20 followersView on X
The Hacker Wire@TheHackerWire231d
Disclosure
🔴 CVE-2025-8350 - Critical Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Respon... https://www.thehackerwire.com/vulnerability/CVE-2025-8350/ https://t.co/LMy0jRyuds
Post summary
CVE-2025-8350 is a critical authentication bypass flaw in BiEticaret CMS, exploiting an Execution After Redirect vulnerability to allow attackers to bypass authentication.
0000056
112 followersView on X
0day Signal@0dayPublishing232d
Disclosure
🚨 CVE-2025-8350: Authentication Bypass with Redire... EAR flaw in BiEticaret CMS enables complete auth bypass via response splitting - vendor ghosted disclosure team despite ... https://zerodaysignal.com/vulnerability/CVE-2025-8350 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE-2025-8350 in BiEticaret CMS enables complete authentication bypass through response splitting, with the vendor unresponsive to the disclosure.
0000052
131 followersView on X

Explore more

Back to dashboard