What’s Vulnerable › Vulnerabilities

CVE-2025-1928: Improper Authentication in Restajet's Online Food Delivery System

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-19 · updated 2026-06-17
• Weakness: CWE-307

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Restajet Information Technologies Inc. Online Food Delivery System: all versions

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469
• https://www.usom.gov.tr/bildirim/tr-25-0469

Get alerted when CVE-2025-1928 or the next vulnerability affects your stack