CVE-2026-2671
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A vulnerability was detected in Mendi Neurofeedback Headset V4. It affects an unknown functionality of the Bluetooth Low Energy Handler. Manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network, and its complexity is high, making exploitation difficult.
Risk Assessment
An attacker on the local network could intercept sensitive data transmitted by the headset, potentially compromising user privacy.
Recommendation
Contact the vendor for firmware updates or secure the local network against unauthorized access.
Original NVD description (English source)
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.