PT-2025-41784 · Akin Software Computer Import Export Industry Trade Co. · Qrmenu

Berat Arslan · Published 2025-10-13 · Updated 2025-10-16 · CVE-2025-9902

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QRMenu versions 1.05.12 through versions prior to 05.09.2025

Description An authorization bypass issue exists in QRMenu, a component of AKIN Software Computer Import Export Industry and Trade Co. Ltd. This flaw allows attackers to bypass authorization controls, potentially gaining access to privileged functionalities or data without proper authentication. The issue is due to a user-controlled key.

Recommendations Update QRMenu to a version dated 05.09.2025 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-9902

Affected Products

Qrmenu

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-9902 · Security Note
• https://twitter.com/UndercodeUpdate/status/1978786356928102802 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0333 · Note
• https://twitter.com/CveTodo/status/1977728619557396986 · Twitter Post
• https://t.me/cveNotify/138446 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0333 · Note
• https://t.me/CVEtracker/34775 · Telegram Post
• https://twitter.com/CVEnew/status/1977731684989550605 · Twitter Post