CVE-2026-19043
MediumCVSS 4.3Summary
Menulux Portal by Menulux Software Inc. has a missing authorization vulnerability that allows accessing functionality not properly constrained by ACLs. This issue affects versions before 20260903211448.
Risk Assessment
The risk involves unauthorized access to portal functionality, potentially leading to data confidentiality breaches or unauthorized actions in the system.
Recommendation
It is recommended to upgrade Menulux Portal to version 20260903211448 or later, which includes a fix for this issue.
Other vulnerabilities in Menulux Portal
See all- CVE-2026-19080High
Observable response discrepancy vulnerability in Menulux Portal before version 20260903211448 allows Account Footprinting.
- CVE-2026-19051High
Plaintext storage of a password vulnerability in Menulux Portal before version 20260903211448 allows Retrieve Embedded Sensitive Data.
- CVE-2026-18957Medium
Menulux Portal by Menulux Software Inc. has a stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions before 20260903211448.
Original NVD description (English source)
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448.