PT-2026-5260 · Akın · Qrmenu

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-7015

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Akın Software QR Menu versions prior to s1.05.12

Description A session fixation issue exists in Akın Software QR Menu. This allows for session fixation, potentially enabling unauthorized access.

Recommendations Update to version s1.05.12 or later.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-7015

Affected Products

Qrmenu

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7015 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7015 · Vendor Advisory
• https://usom.gov.tr/bildirim/tr-26-0006 · Note
• https://t.me/cveNotify/154795 · Telegram Post
• https://t.me/cveNotify/150255 · Telegram Post
• https://t.me/CVEtracker/43230 · Telegram Post
• https://twitter.com/CVEnew/status/2016854775049179277 · Twitter Post