CVE-2026-19051
Received Received - Intake

Plaintext Password Storage in Menulux Portal

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-19051
EUVD
EUVD-2026-71039

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
menulux_software_inc menulux_portal to 20260903211448 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-256 The product stores a password in plaintext within resources such as memory or files.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the plaintext storage of passwords in Menulux Portal software. This means passwords are saved in an unencrypted format, making them easily readable if accessed by unauthorized parties. The issue affects versions of Menulux Portal before 20260903211448.

Impact Analysis

An attacker could exploit this to retrieve stored passwords, leading to unauthorized access to user accounts. This could result in data breaches, loss of sensitive information, or further compromise of the system depending on user privileges.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA, which mandate protection of personal and health data. Plaintext password storage fails to meet encryption and security standards, risking legal penalties and reputational damage.

Mitigation Strategies

Update Menulux Portal to version 20260903211448 or later to address the plaintext password storage issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19051. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart