CVE-2025-7708

Insertion of Sensitive Information Into Sent Data vulnerability in Atlas Educational Software Industry Ltd. Co. K12net allows Communication Channel Manipulation. This issue affects k12net: through 09022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-201

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0021
• https://www.usom.gov.tr/bildirim/tr-26-0021

Published

Feb 9, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7702URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7
• CVE-2025-7703Authentication vulnerability in the mobile application（tech.…3.1
• CVE-2025-7704Supermicro BMC Insyde SMASH shell program has a stacked-bas…5.4
• CVE-2025-7705: Active Debug Code vulnerability in ABB Switch Actuator 4 D…8.6
• CVE-2025-7706Missing Authentication for Critical Function vulnerability i…6.1
• CVE-2025-7707The llama_index library version 0.12.33 sets the NLTK data d…7.8
• CVE-2025-7709An integer overflow exists in the FTS5 https://sqlite.org/f…6.9
• CVE-2025-7710The Brave Conversion Engine (PRO) plugin for WordPress is vu…9.8
• CVE-2025-7711The The Classified Listing – Classified ads & Business Direc…5.4
• CVE-2025-7712The Madara - Core plugin for WordPress is vulnerable to arbi…9.1
• CVE-2025-7713Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-7714Improper Neutralization of Special Elements used in an SQL C…9.8