Security Advisory

CVE-2025-12008

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-14 12:31:50
Last updated 2026-05-14 13:47:07
Assigner TR-CERT
CVSS score 8.8
State PUBLISHED

Description

Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Yaay Social Media App: from 3.8.0 through 24102025.