CVE-2025-7016 Improper Access Control in Akinsoft's QR Menu
Attackers can bypass authentication controls in the QR Menu application to access restricted features or data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-7016?
CVE-2025-7016 is a high-severity missing authorization vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu, published on 29 Jan 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Authentication Abuse.
This issue affects QR Menu: before s1.05.12.
Weakness: CWE-284
Which versions are affected by CVE-2025-7016?
It affects 1 product.
Products include Akinsoft Qr Menu.
How do I fix CVE-2025-7016?
No fix has been published for CVE-2025-7016 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-7016 being exploited?
There is no known exploitation of CVE-2025-7016 in the wild and no public exploit code.
Other vulnerabilities in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu
Sources
Also known as GHSA-rgqc-2558-hgcm.