This vulnerability (CWE-307) in Akinsoft QR Menu allows an attacker to bypass authentication by exploiting insufficient restrictions on excessive authentication attempts. Affected versions include s1.05.07 up to but not including v1.05.12. The CVSS 3.1 score of 8.6 reflects a network-accessible flaw with low complexity and no required privileges or user interaction, resulting in high confidentiality impact and limited integrity and availability impact.

Successful exploitation can lead to authentication bypass, potentially exposing sensitive data or unauthorized access to the affected system. The confidentiality impact is high, while integrity and availability impacts are low. This could allow attackers to access protected functions or data without proper credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing compensating controls such as monitoring for excessive authentication attempts and applying rate limiting if possible. Avoid relying solely on the affected versions for sensitive operations.