Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission

published 2026-03-07 8 mo ago modified 2026-09-16 53 d ago also EUVD-2026-10185

cvss: 3.1; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 8%
public exploits: 0; none known

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 7 mo ago (2026-03-11)

Exploit prediction

0.19% chance of exploitation in the next 30 days, higher than 8% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	4.0	2.3	CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
CNA	3.1	3.1	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R
CNA	3.0	3.1	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R
CNA	2.0	1.8	AV:A/AC:H/Au:N/C:P/I:N/A:N/E:ND/RL:ND/RC:UR
CNA	4.0	2.3	CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA	3.1	3.1	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA	2.0	1.8	AV:A/AC:H/Au:N/C:P/I:N/A:N

Affected products

Mendi Neurofeedback Headset

Classification

Weakness

CWE-319 Cleartext Transmission of Sensitive Information
CWE-310 Cryptographic Issues

References

vuldb.com /vuln/349702
vdb-entry
vuldb.com /vuln/349702/cti
signature, permissions-required
vuldb.com /cve/CVE-2026-2671
third-party-advisory
vuldb.com /submit/766457
third-party-advisory
doi.org /10.22541/au.177196231.16660369/v1
broken-link

Sources

CVE List CVE-2026-2671
NVD CVE-2026-2671

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary