← Retour aux CVEs
CVE-2026-5682
LOW3.7
Description
A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Details CVE
Score CVSS v3.13.7
SeveriteLOW
Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteHIGH
Privileges requisNONE
Interaction utilisateurNONE
Publie4/6/2026
Derniere modification4/6/2026
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-310CWE-327
References
https://github.com/honestcorrupt/MEESHO-CVE(cna@vuldb.com)
https://vuldb.com/submit/792717(cna@vuldb.com)
https://vuldb.com/vuln/355509(cna@vuldb.com)
https://vuldb.com/vuln/355509/cti(cna@vuldb.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.