CVE-2026-2624 - Vulnerability Details - OpenCVE

Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.usom.gov.tr/bildirim/tr-26-0082

History

Wed, 25 Feb 2026 13:00:00 +0000

Type	Values Removed	Values Added
Description		Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.
Title		Authentication Bypass in ePati's Antikor NGFW
Weaknesses		CWE-306
References		https://www.usom.gov.tr/bildirim/tr-26-0082
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-02-25T12:39:47.312Z

Updated: 2026-02-25T15:12:39.466Z

Reserved: 2026-02-17T12:15:11.411Z

Link: CVE-2026-2624

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-02-25T13:16:05.373

Modified: 2026-02-25T14:15:29.980

Link: CVE-2026-2624

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2624", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-02-17T12:15:11.411Z", "datePublished": "2026-02-25T12:39:47.312Z", "dateUpdated": "2026-02-25T15:12:39.466Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Antikor Next Generation Firewall (NGFW)", "vendor": "ePati Cyber \u200b\u200bSecurity Technologies Inc.", "versions": [{"lessThan": "v.2.0.1301", "status": "affected", "version": "v.2.0.1298", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Sad\u0131k ERT\u00dcRK"}], "datePublic": "2026-02-25T12:25:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.<p>This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.</p>"}], "value": "Missing Authentication for Critical Function vulnerability in ePati Cyber \u200b\u200bSecurity Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301."}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-02-25T12:39:47.312Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.usom.gov.tr/bildirim/tr-26-0082"}], "source": {"advisory": "TR-26-0082", "defect": ["TR-26-0082"], "discovery": "UNKNOWN"}, "title": "Authentication Bypass in ePati's Antikor NGFW", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-25T15:11:58.714035Z", "id": "CVE-2026-2624", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:12:39.466Z"}}]}}