PT-2026-57229 · Adam Retail Automation · Mobilmen 20T

Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-2398

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation.

This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-2398

Affected Products

Mobilmen 20T

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-2398 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0526 · Note