CVE-2026-19081

MediumCVSS 4.3

Published: 04/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 04/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Risk Assessment

The risk is the potential for unauthorized access to system functions, which could lead to data integrity violations or unauthorized actions. An attacker may exploit missing authorization to perform operations without privileges.

Recommendation

It is recommended to upgrade the system to version 2026.08.31 or later, which includes authorization fixes. Also, conduct a permissions audit and implement appropriate access control mechanisms.

Other vulnerabilities in Gastromenum Ticket and QR Menu System

CVE-2026-19057Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS