PosCube QR Menu Authorization Bypass Vulnerability Allowing Exploitation of Trusted Identifiers

A vulnerability has been identified in the QR Menu application developed by PosCube Hardware Software and Consulting Ltd. This issue involves an authorization bypass through user-controlled keys, allowing the exploitation of trusted identifiers. The vulnerability affects QR Menu versions through May 21, 2026.

Impact

Exploitation of this vulnerability could enable cyber attackers to bypass authorization mechanisms and manipulate trusted identifiers, potentially leading to unauthorized actions or access within the application.

Remediation

The vendor has not yet addressed this vulnerability. Users of the QR Menu application are advised to switch to a comparable application.