PatchSiren cyber security CVE debrief
CVE-2025-9986 Vadi Corporate Information Systems Ltd. Co. CVE debrief
A high-severity vulnerability, CVE-2025-9986, was found in DIGIKENT by Vadi Corporate Information Systems Ltd. Co. This Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability has a CVSS score of 8.2. The issue affects DIGIKENT up to version 13092025. For more information, refer to [cve-org] and [nvd].
- Vendor
- Vadi Corporate Information Systems Ltd. Co.
- Product
- DIGIKENT
- CVSS
- HIGH 8.2
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-02-11
- Original CVE updated
- 2026-06-05
- Advisory published
- 2026-02-11
- Advisory updated
- 2026-06-05
Who should care
Users of DIGIKENT by Vadi Corporate Information Systems Ltd. Co. should apply patches or mitigations to prevent exploitation.
Technical summary
The vulnerability allows for Excavation and has been categorized under CWE-497. It can be exploited over the network with low attack complexity and no required privileges or user interaction. Successful exploitation can lead to high confidentiality impact, low integrity impact, and no availability impact.
Defensive priority
High
Recommended defensive actions
- Apply patches or updates provided by Vadi Corporate Information Systems Ltd. Co. for DIGIKENT.
- Restrict access to sensitive system information.
- Monitor system logs for suspicious activity.
Evidence notes
Evidence suggests that this vulnerability was published on February 11, 2026, and last modified on June 5, 2026. References can be found at [ref-4] and [ref-5].
Sources and references
Verified primary and authoritative sources
-
CVE-2025-9986 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2025-9986
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2025-9986 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2025-9986
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0056
-
Source reference
Unverified legacy reference
URL: https://www.usom.gov.tr/bildirim/tr-26-0056
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.