CVE-2026-19051
HighCVSS 7.1Summary
Plaintext storage of a password vulnerability in Menulux Portal before version 20260903211448 allows Retrieve Embedded Sensitive Data.
Risk Assessment
The risk is that passwords stored in plaintext can be exposed, potentially leading to unauthorized access to user accounts and related systems.
Recommendation
It is recommended to upgrade Menulux Portal to version 20260903211448 or later. Also, immediately change any passwords that may have been stored in plaintext and implement secure password storage (e.g., using strong salted hash functions).
Other vulnerabilities in Menulux Portal
See all- CVE-2026-19080High
Observable response discrepancy vulnerability in Menulux Portal before version 20260903211448 allows Account Footprinting.
- CVE-2026-19043Medium
Menulux Portal by Menulux Software Inc. has a missing authorization vulnerability that allows accessing functionality not properly constrained by ACLs. This issue affects versions before 20260903211448.
- CVE-2026-18957Medium
Menulux Portal by Menulux Software Inc. has a stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions before 20260903211448.
Original NVD description (English source)
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448.