CVE-2026-2346 describes an authorization bypass vulnerability in the Menulux Software Inc. Mobile App, categorized under CWE-639. The issue arises from improper authorization checks involving a user-controlled key, which can be exploited to perform a software integrity attack. The vulnerability affects the Mobile App through version 12.05.2026. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authorization mechanisms within the Mobile App, leading to full compromise of software integrity. This may result in unauthorized access, modification, or disruption of app functionality, severely impacting confidentiality, integrity, and availability of the application and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently available.