CVE-2026-19080: CWE-204 Observable response discrepancy in Menulux Software Inc. Menulux Portal

CVE-2026-19080 is classified under CWE-204 (Observable Response Discrepancy). It affects Menulux Portal versions before 20260903211448 and allows attackers to perform account footprinting by observing differences in system responses. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating it can be exploited remotely without authentication or user interaction and results in high confidentiality impact. No patch or official remediation level has been published as of the data provided.

The vulnerability enables attackers to enumerate or confirm the existence of valid user accounts on the Menulux Portal by analyzing observable discrepancies in responses. This can lead to targeted attacks against identified accounts. The confidentiality impact is high, but integrity and availability are not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently documented.