Critical · 9.1 CVE-2026-19218 EUVD-2026-94927GHSA-m33r-p2j3-r4pf

Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by TR-CERT

Vendor: AKIN Software Computer Import Export Industry and Trade Product: MyRezzta

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation.

This issue affects MyRezzta: from 2.06.03 before 2.07.01.

Affected products

Vendor	Product	Affected	Fixed
AKIN Software Computer Import-Export Industry and Trade	MyRezzta	2.06.03 – < 2.07.01	2.07.01

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1274 government-resource