Medium · 4.3 CVE-2026-19081 EUVD-2026-71104GHSA-wvh2-vj4m-3cwq

Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by TR-CERT

Vendor: Gastromenum Product: Gastromenum Ticket and QR Menu System

Description

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Affected products

Vendor	Product	Affected	Fixed
Gastromenum	Gastromenum Ticket and QR Menu System	< 2026.08.31	2026.08.31

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1012 government-resource