{"affected":[{"defaultStatus":"unaffected","product":"Hyper E-Commerce Infrastructure","source":"CNA: TR-CERT","vendor":"Hyper Teknoloji Ltd. Şti.","versions":[{"lessThan":"1.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Hyper E-Commerce Infrastructure - dealer integration","source":"CNA: TR-CERT","vendor":"Hyper Teknoloji Ltd. Şti.","versions":[{"lessThan":"1.2","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Hyper E-Commerce Infrastructure - Storefront application and management panel","source":"CNA: TR-CERT","vendor":"Hyper Teknoloji Ltd. Şti.","versions":[{"lessThan":"2.1796","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-110951","cwes":["CWE-640"],"description":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Password Recovery Exploitation.\n\nThis issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794486586042,"publishedAt":1794486435893,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1531"}],"remediation":[],"revision":"21e6fa6ce3c130789148967afd75fab22b934691cbb86d8ad3b992a23ff86adc","sources":[{"modifiedAt":1794486586042,"name":"CNA: TR-CERT","retrievedAt":1794488899401,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110951"}],"ssvc":null,"status":"published","title":"Password Reset via Unverified Email Leading to Account Takeover in Hyper Technology's Hyper E-Commerce Infrastructure","updatedAt":1794488899401}