PT-2026-5267 · Unknown · Qr Menu Pro Smart Menu Systems Menu Panel

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-7014

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QR Menu Pro Smart Menu Systems Menu Panel versions through 29012026

Description A session fixation issue exists in QR Menu Pro Smart Menu Systems Menu Panel, potentially allowing session hijacking. The issue affects the Menu Panel component.

Recommendations Versions prior to 29012026 should be updated.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-7014

Affected Products

Qr Menu Pro Smart Menu Systems Menu Panel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-7014 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7014 · Vendor Advisory
• https://twitter.com/CVEnew/status/2016881157674266940 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0007 · Note
• https://t.me/cveNotify/154784 · Telegram Post