Missing Authorization Vulnerability in Menulux Portal by Menulux Software Inc.
CVE-2026-19043

4.3MEDIUM

Key Information:

Vendor

Menulux Software Inc.

Status
Menulux Portal
Vendor
CVE Published:
4 September 2026

What is CVE-2026-19043?

A vulnerability has been identified in Menulux Portal that permits unauthorized access to certain functionalities. This occurs due to insufficient access control measures, allowing users to access functionalities that should have been constrained by Access Control Lists (ACLs). Users are advised to review their deployment of Menulux Portal versions prior to 20260903211448 to mitigate potential risks.

Affected Version(s)

Menulux Portal 0 < 20260903211448

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ĺžahnur Eren ALOÄžLU
.