CVE-2026-19081: CWE-862 Missing Authorization in Gastromenum Gastromenum Ticket and QR Menu System

The vulnerability identified as CVE-2026-19081 in the Gastromenum Ticket and QR Menu System is classified under CWE-862 (Missing Authorization). It allows unauthorized users with limited privileges to access functionality that should be restricted by ACLs. This could lead to unauthorized access to certain features or data within the system. The affected versions are all releases prior to 2026.08.31. The CVSS v3.1 score is 4.3, indicating a medium impact primarily due to low confidentiality impact and no integrity or availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation responsibility lies with the user.

The vulnerability allows users with some level of privileges (PR:L) to access functionality that should be restricted, potentially leading to unauthorized information disclosure (confidentiality impact is low). There is no impact on integrity or availability. This could result in limited unauthorized access within the Gastromenum Ticket and QR Menu System.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to the system to trusted users and review ACL configurations to minimize exposure.