CVE-2025-5260: Pik Online Yazılım Çözümleri A.ş Pik Online

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Pik Online Yazılım Çözümleri A.Ş. Pik Online allows Server Side Request Forgery. This issue affects Pik Online: before 3.1.5.

Affected products

• Pik Online Yazılım Çözümleri A.ş Pik Online: before 3.1.5 (fixed in 3.1.5)

Published 2025-08-20. Last modified 2026-06-17.