Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-18957

Stored XSS in Menulux Software's Menulux Portal

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Menulux Portal
CVE-2026-19043

Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Menulux Portal
CVE-2026-19051

Plaintext Storage of User Credentials in Menulux Software's Menulux Portal

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Menulux Portal
CVE-2026-19080

Username Enumeration in Menulux Software's Menulux Portal

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Menulux Portal
CVE-2026-2346

IDOR in Menulux Software's Mobile App

Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Mobile App
CVE-2025-13474

IDOR in Menulux Software's Mobile App

Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation of Trusted Identifiers. This issue affects Mobile App: before 9.5.8.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Mobile App
CVE-2024-4428

Sensetive Data Exposure in Menulux Managment Portal

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Menulux
Products
Management Portal Managment Portal