CVE-2026-19080
HighCVSS 7.5Summary
Observable response discrepancy vulnerability in Menulux Portal before version 20260903211448 allows Account Footprinting.
Risk Assessment
The risk is that an attacker can gather information about existing accounts, which may facilitate further attacks such as phishing or brute force.
Recommendation
It is recommended to upgrade Menulux Portal to version 20260903211448 or later. Additionally, standardize server responses for different account states to hinder footprinting.
Other vulnerabilities in Menulux Portal
See all- CVE-2026-19051High
Plaintext storage of a password vulnerability in Menulux Portal before version 20260903211448 allows Retrieve Embedded Sensitive Data.
- CVE-2026-19043Medium
Menulux Portal by Menulux Software Inc. has a missing authorization vulnerability that allows accessing functionality not properly constrained by ACLs. This issue affects versions before 20260903211448.
- CVE-2026-18957Medium
Menulux Portal by Menulux Software Inc. has a stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions before 20260903211448.
Original NVD description (English source)
Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448.