CVE-2026-6853

Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue affects Pause+ Mobile App: from v1.0.6 before v1.5.

• CWE-307

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0368

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68523`fulgur` converts untrusted HTML/CSS into PDF, commonly on a…7.5
• CVE-2026-68525Incorrect Authorization vulnerability in Apache Tomcat's FOR…9.1
• CVE-2026-68526Concrete CMS before 9.5.3 did not validate an anti-CSRF toke…4.3
• CVE-2026-68527Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to …5.9
• CVE-2026-68528Concrete CMS RSS Displayer block below version 9.5.3 render…6
• CVE-2026-68529Concrete CMS 9.0.0 through 9.5.2 was missing an authorizatio…2.1
• CVE-2026-68530Concrete CMS 9 through 9.5.2 did not perform an authorizatio…2.1
• CVE-2026-68531Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard…2.1
• CVE-2026-68532Concrete CMS 9.0.0 to dashboard group type controller did no…2.3
• CVE-2026-68533Concrete CMS below 9.5.3 conversation attachment uploaded en…2.3
• CVE-2026-68534Concrete CMS before 9.5.3 rendered Express entry labels as r…2.3
• CVE-2026-68535Concrete CMS Area API's block-create endpoint in versions 9.…4.3