CVE-2025-1928

9.1 criticalEPSS 0.4%

Critical (9.1) in restajet online food delivery system. EPSS 0.4% chance of exploitation in the next 30 days.

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2025-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

restajet:online_food_delivery_system

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469
https://www.usom.gov.tr/bildirim/tr-25-0469

Check your stack JSON