PT-2026-5262 · Akın · Qrmenu

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-7016

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QR Menu versions prior to s1.05.12

Description An improper access control issue exists in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu, allowing for authentication abuse. The issue allows unauthorized access due to flawed access control mechanisms.

Recommendations Update QR Menu to version s1.05.12 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-7016

Affected Products

Qrmenu

References · 7

• https://osv.dev/vulnerability/CVE-2025-7016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7016 · Security Note
• https://t.me/cveNotify/154796 · Telegram Post
• https://t.me/cveNotify/150256 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0006 · Note
• https://t.me/CVEtracker/43231 · Telegram Post
• https://twitter.com/TheHackerWire/status/2016849430188859423 · Twitter Post