Menulux Software Inc. vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-19080Menulux Portal · Observable Response Discrepancy High7.5EPSS 0.4%2026-09-04CVE Database V5CVE-2026-19080 Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448. EPSS 0.4%Vulnerability Menulux Software CWE-204	CVE Database V5	2026-09-04
High	7.1	EPSS 0.3%	CVE-2026-19051Menulux Portal · Plaintext Storage of a Password High7.1EPSS 0.3%2026-09-04CVE Database V5CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448. EPSS 0.3%Vulnerability Menulux Software CWE-256	CVE Database V5	2026-09-04
Medium	4.3	EPSS 0.3%	CVE-2026-19043Menulux Portal · Missing Authorization Medium4.3EPSS 0.3%2026-09-04CVE Database V5CVE-2026-19043 Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448. EPSS 0.3%Vulnerability Menulux Software CWE-862 #ghsa-rfjh-93x9-m2mh	CVE Database V5	2026-09-04
Medium	5.4	EPSS 0.2%	CVE-2026-18957Menulux Portal · Cross-site Scripting Medium5.4EPSS 0.2%2026-09-04CVE Database V5CVE-2026-18957 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448. EPSS 0.2%Vulnerability Menulux Software CWE-79	CVE Database V5	2026-09-04
Critical	9.8	EPSS 0.5%	CVE-2026-2346Menulux Software Mobile App · Insecure Direct Object Reference Critical9.8EPSS 0.5%2026-08-03CVE Database V5CVE-2026-2346 CVE-2026-2346 is a critical authorization bypass vulnerability in the Menulux Software Inc. Mobile App affecting versions up to 12.05.2026. The flaw arises from a user-controlled key that allows an attacker to bypass authorization checks, potentially leading to a software integrity attack. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. EPSS 0.5%Vulnerability CWE-639	CVE Database V5	2026-08-03
High	7.5	EPSS 0.3%	CVE-2025-13474Menulux Software Mobile App · Insecure Direct Object Reference High7.5EPSS 0.3%2025-12-16CVE Database V5CVE-2025-13474 Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation of Trusted Identifiers. This issue affects Mobile App: before 9.5.8. EPSS 0.3%Vulnerability CWE-639	CVE Database V5	2025-12-16

Page 1 of 1