CVE-2025-4320 affects Birebirsoft Software and Technology Solutions Sufirmam through version 23012026. The vulnerability involves authentication bypass through a weak password recovery mechanism for forgotten passwords. This allows attackers to exploit the password recovery process to bypass authentication controls. The vendor was contacted about the disclosure but did not respond. The issue enables both authentication bypass and password recovery exploitation attacks.