CVE-2026-2671CWE-319

CVE-2026-2671

Low · published March 7, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-03-07T23:16Z
References (5)
EPSS history
Timeline
  • 07 MAR 18:02Z
    Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission
    cvelistv5