CVE-2026-19426 describes a missing authentication vulnerability in the FitSoft POS System. This vulnerability permits unauthenticated remote attackers to directly access and operate critical functions of the POS system without any authentication checks. The CVSS 3.1 vector indicates the attack can be performed remotely with no privileges or user interaction required, resulting in low confidentiality impact but high integrity impact and no availability impact. No patch or remediation level has been published by the vendor, and no affected versions are specified.

Unauthenticated remote attackers can access and manipulate critical functions of the FitSoft POS System, potentially leading to unauthorized operations and data integrity compromise. Confidentiality impact is low, but integrity impact is high. Availability is not affected. This poses a significant risk to the security and trustworthiness of the POS system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the POS system and monitor for unauthorized access attempts. Implement compensating controls such as network segmentation and access controls where possible.