What is CVE-2025-10465?

CVE-2025-10465 is a high-severity vulnerability in Birtech Information Technologies Industry And Trade Ltd. Co. Sensaway, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2026-02-09.

How severe is CVE-2025-10465?

High severity. CVSS v3 base score is 8.8 out of 10.

Arbitrary file upload in Birtech Information Technologies Industry And Trade Ltd. Co. Sensaway

CVE-2025-10465

Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server. This issue affects Sensaway: through 09022026. NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.

Vulnerability class: Unrestricted File Upload

EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Birtech Information Technologies Industry And Trade Ltd. Co. Sensaway — versions 0

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2025-10465?: CVE-2025-10465 is a high-severity vulnerability in Birtech Information Technologies Industry And Trade Ltd. Co. Sensaway, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2026-02-09.
How severe is CVE-2025-10465?: High severity. CVSS v3 base score is 8.8 out of 10.