PT-2026-30730 · Meesho · Meesho Online Shopping App

Honest_Corrupt · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5682

Positive Technologies · (AI Summary)

CVSS v3.1

3.7

Low

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Meesho Online Shopping App versions up to 27.3

Description A vulnerability exists in the Meesho Online Shopping App for Android, affecting versions up to 27.3. The issue involves a risky cryptographic algorithm within an unknown function of the /api/endpoint file in the com.meesho.supply component. This manipulation can be performed remotely, but requires a high level of complexity and is considered difficult to exploit. The exploit has been publicly disclosed.

Recommendations Update Meesho Online Shopping App to a version newer than 27.3.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-310

Related Identifiers

CVE-2026-5682

Affected Products

Meesho Online Shopping App

References · 6

• 🔥 https://github.com/honestcorrupt/MEESHO-CVE · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5682 · Security Note
• https://vuldb.com/vuln/355509 · Note
• https://vuldb.com/vuln/355509/cti · Note
• https://twitter.com/CVEnew/status/2041250711262896273 · Twitter Post
• https://vuldb.com/submit/792717 · Note