CVE-2026-6853
Deferred Deferred - Pending Action
Authentication Bypass in Pause+ Mobile App

Publication date: 2026-06-12

Last updated on: 2026-06-12

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue affects Pause+ Mobile App: from v1.0.6 before v1.5.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-12
Last Modified
2026-06-12
Generated
2026-06-12
AI Q&A
2026-06-12
EPSS Evaluated
N/A
NVD
CVE-2026-6853
EUVD
EUVD-2026-36429
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
basbelen_group_food_cafe_businesses_industry_and_trade_ltd_co pause_plus_mobile_app From 1.0.6 (inc) to 1.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-307 The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an improper restriction of excessive authentication attempts in the Pause+ Mobile App by Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. It allows an attacker to bypass authentication mechanisms by exploiting the lack of proper limits on the number of login attempts.

Impact Analysis

The vulnerability can lead to an authentication bypass, which means unauthorized users could gain access to the application without proper credentials. This can result in full compromise of confidentiality, integrity, and availability of the affected system, as indicated by the high CVSS score (9.8).

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-6853. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart