CVE-2026-5682
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In Meesho Online Shopping App for Android up to version 27.3, the component com.meesho.supply in the file /api/endpoint uses a risky cryptographic algorithm. The attack can be performed remotely but is difficult to exploit.
Risk Assessment
The risk is that a remote attacker may break the encryption, potentially exposing sensitive data transmitted between the app and server.
Recommendation
Contact the vendor for an update that replaces the risky cryptographic algorithm with a more secure one.
Original NVD description (English source)
A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.