SecuriTricks - CVE-2026-2671

Description

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Product(s) Impacted

Vendor	Product	Versions
Mendi	Mendi Neurofeedback Headset	v4, *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-310

None

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	mendi	mendi_neurofeedback_headset	v4	/	/	/	/	/	/	/
a	mendi	mendi_neurofeedback_headset	/	/	/	/	/	/	/	/

References

https://ab3j.radio/mendi.pdf

https://vuldb.com/?ctiid.349702

https://vuldb.com/?id.349702

https://vuldb.com/?submit.766457

CVSS Score

2.3 / 10

CVSS Data - 4.0

Attack Vector: ADJACENT
Attack Complexity: HIGH
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: LOW
Integrity Impact: NONE
Availability Impact: NONE
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: March 7, 2026, 6:16 p.m.
Last Modified: March 7, 2026, 6:16 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

[email protected]

CVE-2026-2671