HackZoneLabs News
Newsletter

CVE-2026-111552

Multi-Factor Authentication Bypass in Hyper Technology's Hyper E-Commerce Infrastructure

  • High 7.1

Description

Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.

Key facts

Published
12 Nov 2026
Last changed
12 Nov 2026
Assigned by
TR-CERT
EPSS
0.22% likely to be exploited in the next 30 days, higher than 12.698% of CVEs (scores for 15 Nov 2026)

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

  • 7.1CVSS 3.1, Highfrom the CNA (TR-CERT)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

CAPEC-115 Authentication Bypass (CNA impact statement)

No explicit remediation statement is available on this page yet. Consult the original record and vendor references before choosing a fix.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

VendorProductVersions
Hyper Teknoloji Ltd. Şti.Hyper E-Commerce Infrastructure
  • Default status: unaffected
  • 0 up to but excluding 1.1 (affected)
Hyper Teknoloji Ltd. Şti.Hyper E-Commerce Infrastructure - dealer integration
  • Default status: unaffected
  • 0 up to but excluding 1.2 (affected)
Hyper Teknoloji Ltd. Şti.Hyper E-Commerce Infrastructure - Storefront application and management panel
  • Default status: unaffected
  • 0 up to but excluding 2.1796 (affected)

Timeline

  1. 12 Nov 2026 Published

Weakness

References