CVE-2026-8323

CVSS 9.3 (critical) · published 2026-09-10

URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2.

Weakness: CWE-601

Source: NVD CVE-2026-8323

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1061

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.