Weak Password Recovery Mechanism in MyRezzta by AKIN Software
CVE-2026-19218

9.1CRITICAL

Key Information:

Vendor: Akin Software Computer Import-export Industry And Trade Co. Ltd.
Status: Myrezzta
Vendor: CVE Published:; 8 October 2026

🔔 Create Akin Software Computer Import-export Industry And Trade Co. Ltd. Vulnerability Alert

What is CVE-2026-19218?

A security flaw in the MyRezzta platform developed by AKIN Software exposes users to potential account compromises through a weak password recovery mechanism. This vulnerability enables attackers to exploit the password recovery feature, potentially allowing unauthorized access to user accounts. It affects versions from 2.06.03 before 2.07.01, emphasizing the need for users to update their software to mitigate the risks associated with this vulnerability.

Affected Version(s)

MyRezzta 2.06.03 < 2.07.01

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 8, 2026
Vulnerability Reserved
Aug 7, 2026

Credit

Berat ARSLAN

CVE-2026-19218 Data

JSON