Gastromenum vulnerabilities

Products

• Gastromenum Ticket and QR Menu System 2
• GastroMenum Web Panel 1

Latest Gastromenum CVEs

Newest publication first

1. CVE-2026-19205 User Enumeration in GastroMenum's GastroMenum Web Panel

   Published 2026-09-04

   High·CVSS 7.5

   Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026.

2. CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

   Published 2026-09-04

   Medium·CVSS 4.3

   Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

3. CVE-2026-19057 Stored XSS in Gastromenum's Gastromenum Ticket and QR Menu System

   Published 2026-09-04

   Medium·CVSS 5.4

   Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.