Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-19218

Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 2.07.01
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01.

Affected versions

  • AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta

    From 2.06.03 · fixed in 2.07.01

References 1

siberguvenlik.gov.tr