Vulnerabilidades de Menulux Software Inc.
CVEs publicadas que afetam produtos de Menulux Software Inc.: 6 registro(s), com severidade, exploração e correções.
CVE-2026-19080
Alta · 7.5
CWE-204 04/09/2026
Username Enumeration in Menulux Software's Menulux Portal
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting.
This issue affects Menulux Portal: before 20260903211448.
CVE-2026-19051
Alta · 7.1
CWE-256 04/09/2026
Plaintext Storage of User Credentials in Menulux Software's Menulux Portal
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data.
This issue affects Menulux Portal: before 20260903211448.
CVE-2026-19043
Média · 4.3
CWE-862 04/09/2026
Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Menulux Portal: before 20260903211448.
CVE-2026-18957
Média · 5.4
CWE-79 04/09/2026
Stored XSS in Menulux Software's Menulux Portal
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS.
This issue affects Menulux Portal: before 20260903211448.
CVE-2026-2346
Crítica · 9.8
CWE-639 03/08/2026
IDOR in Menulux Software's Mobile App
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack.
This issue affects Mobile App: through 12.05.2026.
CVE-2025-13474
Alta · 7.5
CWE-639 16/12/2025
IDOR in Menulux Software's Mobile App
Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation of Trusted Identifiers.
This issue affects Mobile App: before 9.5.8.