CVE Intelligence

Menulux Software Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Menulux Software Inc. products: 5 record(s), with severity, exploitation and fixes.

Menulux Portal 3Mobile App 2

Exploited only (KEV) →

CVE-2026-19080 High · 7.5 CWE-204 Sep 4, 2026
Username Enumeration in Menulux Software's Menulux Portal
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448.
CVE-2026-19051 High · 7.1 CWE-256 Sep 4, 2026
Plaintext Storage of User Credentials in Menulux Software's Menulux Portal
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448.
CVE-2026-18957 Medium · 5.4 CWE-79 Sep 4, 2026
Stored XSS in Menulux Software's Menulux Portal
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448.
CVE-2026-2346 Critical · 9.8 CWE-639 Aug 3, 2026
IDOR in Menulux Software's Mobile App
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026.
CVE-2025-13474 High · 7.5 CWE-639 Dec 16, 2025
IDOR in Menulux Software's Mobile App
Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation of Trusted Identifiers. This issue affects Mobile App: before 9.5.8.