Authorization Bypass Vulnerability in PosCube QR Menu Software
CVE-2025-13479

7.5HIGH

Key Information:

Vendor: Poscube Hardware Software And Consulting Ltd.
Status: Qr Menu
Vendor: CVE Published:; 21 May 2026

🔔 Create Poscube Hardware Software And Consulting Ltd. Vulnerability Alert

What is CVE-2025-13479?

A vulnerability in the QR Menu Software produced by PosCube Hardware Software and Consulting Ltd. allows unauthorized access due to a failure in proper verification of user-controlled keys. This makes it possible for an attacker to exploit trusted identifiers to bypass authorization mechanisms, compromising the integrity and confidentiality of the system. The vulnerability remains unaddressed as the vendor has not responded to disclosure attempts.

Affected Version(s)

QR Menu 0 <= 21052026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 21, 2026
Vulnerability Reserved
Nov 20, 2025

Credit

Ahmet Umut OĞURLU

CVE-2025-13479 Data

JSON