Vulnerabilities

TI-2026-15598 CVE-2026-19080 · GHSA-q387-rm8q-3pr3

Username Enumeration in Menulux Software's Menulux Portal

LOW 39

Observable response discrepancy vulnerability in Menulux Software Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-09-04 Fixed in 20260903211448 CWE-204

TI-2026-15571 CVE-2026-19051 · GHSA-3fv3-95xg-8349

LOW 31

Plaintext storage of a password vulnerability in Menulux Software Inc.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0029 Published 2026-09-04 Fixed in 20260903211448 CWE-256

TI-2026-15564 CVE-2026-19043 · GHSA-rfjh-93x9-m2mh

LOW 20

Missing Authorization vulnerability in Menulux Software Inc.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-09-04 Fixed in 20260903211448 CWE-862

TI-2026-15493 CVE-2026-18957 · GHSA-hwxg-9xv5-wjh5

LOW 24

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-09-04 Fixed in 20260903211448 CWE-79

TI-2026-01983 CVE-2026-2346 · GHSA-vhg6-8gp7-pg76

MEDIUM 49

Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00512 Published 2026-08-03 No fix listed CWE-639

TI-2025-12318 CVE-2025-13474 · GHSA-j2v6-pm7r-ggcf

LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00304 Published 2025-12-16 Fixed in 9.5.8 CWE-639