CVE-2026-19043
Received Received - Intake

Missing Authorization in Menulux Portal Allows Unrestricted Access

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-19043
EUVD
EUVD-2026-71038

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
menulux_software_inc menulux_portal to 20260903211448 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authorization issue in Menulux Portal where certain functions can be accessed without proper access control checks. This means an attacker with low privileges could potentially perform actions they should not be allowed to do.

Detection Guidance

To detect this vulnerability, inspect Menulux Portal for endpoints or functions that should be restricted by ACLs but are accessible without proper authorization. Check for unusual access patterns or requests to sensitive endpoints. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to access restricted features or data in Menulux Portal, potentially leading to unauthorized actions, data leaks, or system misuse. The impact is limited as it requires some user interaction and does not allow full system compromise.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it results in unauthorized access to personal or sensitive data. Organizations must ensure proper access controls to meet regulatory requirements for data protection.

Mitigation Strategies

Update Menulux Portal to version 20260903211448 or later to address the missing authorization vulnerability. Ensure proper ACLs are configured to restrict unauthorized access to sensitive functionalities.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19043. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart