Medium 5.5Published Oct 20, 2025

CVE-2025-8884IDOR in VHS Electronic Software's ACE Center

Updated under an hour ago (Oct 26, 2026, 7:50 PM ET)

Does this affect you?

It affects VHS Electronic Software Ltd. Co. ACE Center. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for VHS Electronic Software Ltd. Co. ACE Center

Exploited in the last 30 days

Authorization Bypass Through User-Controlled Key vulnerability in VHS Electronic Software Ltd. Co. ACE Center allows Privilege Abuse, Exploitation of Trusted Identifiers. This issue affects ACE Center: from 3.10.100.1768 before 3.10.161.2255.

CVSS: 5.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-639
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: TR-CERT
NVD analysis: Deferred
Record last updated: Jun 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

VHS Electronic Software Ltd. Co. ACE Center vhs_electronic_software:ace_center (from the name)	from 3.10.100.1768 before 3.10.161.2255	CNA record

References

References

https://www.usom.gov.tr/bildirim/tr-25-0348	government-resource, broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0348	government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.