{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2624", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-02-17T12:15:11.411Z", "datePublished": "2026-02-25T12:39:47.312Z", "dateUpdated": "2026-06-06T07:53:37.538Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T07:53:37.538Z"}, "title": "Authentication Bypass in ePati's Antikor NGFW", "datePublic": "2026-02-25T12:25:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "product": "Antikor Next Generation Firewall (NGFW)", "versions": [{"status": "affected", "version": "v.2.0.1298", "lessThan": "v.2.0.1301", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.<p>This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.</p>"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-26-0082", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Sad\u0131k ERT\u00dcRK", "type": "finder"}], "source": {"defect": ["TR-26-0082"], "advisory": "TR-26-0082", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-25T15:11:58.714035Z", "id": "CVE-2026-2624", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:12:39.466Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2624", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-25T15:11:58.714035Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:12:14.072Z"}}], "cna": {"title": "Authentication Bypass in ePati's Antikor NGFW", "source": {"defect": ["TR-26-0082"], "advisory": "TR-26-0082", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Sad\u0131k ERT\u00dcRK"}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "product": "Antikor Next Generation Firewall (NGFW)", "versions": [{"status": "affected", "version": "v.2.0.1298", "lessThan": "v.2.0.1301", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-02-25T12:25:00.000Z", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-26-0082", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.", "supportingMedia": [{"type": "text/html", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.<p>This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T07:53:37.538Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2624", "state": "PUBLISHED", "dateUpdated": "2026-06-06T07:53:37.538Z", "dateReserved": "2026-02-17T12:15:11.411Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2026-02-25T12:39:47.312Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:epati:antikor_next_generation_firewall:*:*:*:*:*:*:*:*", "matchCriteriaId": "959FF153-E879-419E-B290-FC7014AA1D6A", "versionEndExcluding": "2.0.1301", "versionStartIncluding": "2.0.1298", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.\n\nThis issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301."}, {"lang": "es", "value": "Vulnerabilidad de autenticaci\u00f3n faltante para funci\u00f3n cr\u00edtica en el Cortafuegos de Pr\u00f3xima Generaci\u00f3n (NGFW) Antikor de ePati Cyber ??Security Technologies Inc. permite la omisi\u00f3n de autenticaci\u00f3n. Este problema afecta al Cortafuegos de Pr\u00f3xima Generaci\u00f3n (NGFW) Antikor: desde la v.2.0.1298 anterior a la v.2.0.1301."}], "id": "CVE-2026-2624", "lastModified": "2026-06-06T08:16:53.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-02-25T13:16:05.373", "references": [{"source": "[email protected]", "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0082"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://www.usom.gov.tr/bildirim/tr-26-0082"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "[email protected]", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[v.2.0.1298,v.2.0.1301)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Antikor Next Generation Firewall (NGFW)", "source": "cna", "vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc."}, "product": "antikor_next_generation_firewall", "vendor": "epati_cyber_\u200b\u200bsecurity_technologies"}], "created": "2026-02-26T13:18:06.876632+00:00", "updated": "2026-06-06T09:30:17.504711+00:00", "vendors": ["epati_cyber_\u200b\u200bsecurity_technologies", "epati_cyber_\u200b\u200bsecurity_technologies$PRODUCT$antikor_next_generation_firewall"]}