CVE-2026-19218: CWE-640 Weak Password Recovery Mechanism for Forgotten Password in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta

The vulnerability identified as CVE-2026-19218 in MyRezzta versions >=2.06.03 and <2.07.01 is classified under CWE-640, indicating a weak password recovery mechanism. This flaw allows an attacker to exploit the password recovery process, potentially leading to unauthorized access by compromising user credentials. The CVSS v3.1 score of 9.1 reflects network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality and integrity impacts, with no impact on availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure and modification of sensitive user credentials due to the weak password recovery mechanism. This compromises the confidentiality and integrity of user accounts in affected MyRezzta versions. There is no indication of availability impact. No known exploits are reported in the wild at this time.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider restricting access to the password recovery functionality or implementing additional verification controls if possible.