Skip to content
OpenAdvisories
High · 7.5 CVE-2025-13479 EUVD-2025-209908GHSA-j79r-fqf4-6hmx

IDOR in PosCube's QR Menu

Published May 21, 2026 · Updated May 21, 2026 · Assigned by TR-CERT

Description

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers.

This issue affects QR Menu: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
PosCube Hardware Software and Consulting QR Menu ≤ 21052026 —

References