CVE Catalog
CVE-2026-2346
CriticalCVSS 9.8Summary
Menulux Software Inc. Mobile App through version 12.05.2026 contains an authorization bypass vulnerability through a User-Controlled key, allowing a Software Integrity Attack.
Risk Assessment
The risk includes potential compromise of software integrity, which could lead to unauthorized changes in the application and potential data leakage.
Recommendation
It is recommended to immediately update the Menulux mobile app to the latest version and implement authorization mechanisms based on trusted server-side keys.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026.