PT-2026-23879 · Mendi · Mendi Neurofeedback Headset V4

Drewbug + 1 · Publicado 2026-03-07 · Atualizado 2026-03-07 · CVE-2026-2671

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mendi Neurofeedback Headset version V4

Description A vulnerability exists in the Bluetooth Low Energy Handler component of the Mendi Neurofeedback Headset V4, allowing for the cleartext transmission of sensitive information. The attack requires manipulation and can only be performed from the local network. Exploitation is considered difficult. The vendor was contacted regarding this issue but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-310

CWE-319

Identificadores relacionados

CVE-2026-2671

Produtos afetados

Mendi Neurofeedback Headset V4

Referências · 8

• https://t.me/CVEtracker/46753 · Publicação no Telegram
• https://t.me/cveNotify/154619 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2671 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2030377496298791121 · Publicação no Twitter
• https://vuldb.com/?submit.766457 · Nota
• https://vuldb.com/?ctiid.349702 · Nota
• https://vuldb.com/?id.349702 · Nota
• https://ab3j.radio/mendi.pdf · Nota