๐Ÿ” CVE Alert

CVE-2026-19218

CRITICAL 9.1

Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01.

CWE CWE-640
Vendor akin software computer import-export industry and trade co. ltd.
Product myrezzta
Published Oct 8, 2026
Stay Ahead of the Next One

Get instant alerts for akin software computer import-export industry and trade co. ltd. myrezzta

Be the first to know when new critical vulnerabilities affecting akin software computer import-export industry and trade co. ltd. myrezzta are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Affected Versions

AKIN Software Computer Import-Export Industry and Trade Co. Ltd. / MyRezzta
2.06.03 < 2.07.01

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1274

Credits

Berat ARSLAN