Improper Access Control in QR Menu by Akın Software
CVE-2025-7016

8HIGH

Key Information:

Vendor

Akın Software Computer Import Export Industry And Trade Ltd.

Status
Qr Menu
Vendor
CVE Published:
29 January 2026

What is CVE-2025-7016?

The QR Menu application developed by Akın Software contains an improper access control vulnerability that allows for authentication abuse. This flaw could potentially enable unauthorized users to exploit sensitive functionalities of the application. Users are encouraged to update to the latest version, as affected versions prior to s1.05.12 are at risk.

Affected Version(s)

QR Menu 0

References

https://www.usom.gov.tr/bildirim/tr-26-0006

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Şahnur Eren ALOĞLU
.