Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-2671

Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission

CVSS 4.0 2.3 LOWCVSS 3.1 3.1 LOWCVSS 3.0 3.1 LOWCVSS 2.0 1.8 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-2671

Published

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-2671

Published

Neurofeedback Headset

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Mendi",
                    "product": "Neurofeedback Headset",
                    "versions": [
                        {
                            "version": "V4",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:mendi:neurofeedback_headset:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Bluetooth Low Energy Handler"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON