CVE-2026-2398 — IDOR in AdamPOS' MobilMen 20T

CVE-2026-2398

IDOR in AdamPOS' MobilMen 20T PUBLISHED

Description (CNA)

Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Adam Retail Automation Ltd. / MobilMen 20T	affected v3 through 10072026

CWE

CWE-639

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0526

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.