CVE-2025-0610 is a high-severity CSRF vulnerability in Akınsoft QR Menü affecting versions from s1.05.06 before v1.05.12. It allows attackers to trick authenticated users into executing unwanted actions without their knowledge. The vulnerability has a CVSS 3.1 base score of 8.6, reflecting its network accessibility, low complexity, and significant impact on confidentiality, integrity, and availability. No patch or official remediation guidance has been published by the vendor as of the current information. The product is not a cloud service, so remediation depends on vendor patching or user updates. No known exploits have been reported in the wild.

Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized actions on behalf of legitimate users, potentially leading to loss of confidentiality, integrity, and availability of the affected system. Given the CVSS vector, the attack can be performed remotely without privileges or user interaction, increasing the risk. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should implement standard CSRF mitigations such as validating anti-CSRF tokens, enforcing same-site cookies, and restricting sensitive actions to POST requests. Monitoring vendor channels for updates is recommended.