CVE-2026-19081
Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System
- State
- Published
- Severity
- 4.3 Medium
- Published
- Sep 4, 2026
- Updated
- Sep 4, 2026
- Reserved
- Aug 6, 2026
Description
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | TR-CERT |
Weaknesses
- CWE-862 Missing Authorization
Affected Products
| Product | Versions |
|---|---|
Gastromenum Ticket and QR Menu SystemGastromenum |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1012government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.