CVE-2025-7016CWE-284

Improper Access Control in Akinsoft's QR Menu

High · published January 29, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

⚡ Authentication abuse is the name of the game here! The QR Menu from Akın Software has an improper access control flaw that could allow users to unleash chaos! 🔥 Think of it like a restaurant where the waitstaff can seat anyone without checking their reservation — anyone could walk in and claim a table that's not theirs. If they can access sensitive data or perform unauthorized actions, it creates quite a mess! An attacker could exploit this vulnerability to manipulate the system, gaining access to sensitive features and data intended only for authenticated users. The potential fallout? Your restaurant's menu could be altered, orders could be mixed up, or worse, sensitive customer data could be exposed!

Put simply

Think of it like a restaurant where the waitstaff can seat anyone without checking their reservation — anyone could walk in and claim a table that's not theirs. If they can access sensitive data or perform unauthorized actions, it creates quite a mess! This vulnerability in QR Menu allows authentication abuse due to improper access control. Unsanctioned users could bypass checks and gain unauthorized access to restricted operations or data, impacting both security and integrity.

What to do

An attacker could exploit this vulnerability to manipulate the system, gaining access to sensitive features and data intended only for authenticated users. The potential fallout? Your restaurant's menu could be altered, orders could be mixed up, or worse, sensitive customer data could be exposed! To protect your system, update QR Menu to version 1.05.12 or later immediately. Conduct an audit of user permissions to ensure that only authorized personnel have access to critical functionality. Don't forget to keep your security practices up to date! You've got this! Patch up and secure your menu before any unwelcome guests arrive! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-01-29T11:45Z
EPSS history
Timeline
  • 29 JAN 11:45Z
    Improper Access Control in Akinsoft's QR Menu
    cvelistv5