Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-6853 EUVD-2026-36429GHSA-hmm4-32x8-q64g

OTP Bypass in Başbelen Group's Pause+ Mobile App

Published Jun 12, 2026 · Updated Jun 12, 2026 · Assigned by TR-CERT

Description

Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass.

This issue affects Pause+ Mobile App: from v1.0.6 before v1.5.

Affected products

VendorProductAffectedFixed
Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App v1.0.6 – < v1.5 v1.5

References