CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

MediumCVSS 4.3 EPSS 0.27%

Published: 2026-09-04 16:57
Updated: 2026-09-08 17:12
Exploit status: No public exploit known

Description

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Affected products

Product	Affected versions	Fixed in
Gastromenum Ticket and QR Menu System	< 2026.08.31	2026.08.31

References

siberguvenlik.gov.tr government-resource

CVSS v3.1

4.3 Medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None

All scores (2)

v3.1 4.3 · tr-cert
v3.1 4.3 · iletisim@usom.gov.tr

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.27% (percentile 19.5)
CWE: CWE-862 Missing Authorization

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.