Is CVE-2026-2671 actively exploited?

No active exploitation of CVE-2026-2671 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-2671 be exploited remotely?

Partially. CVE-2026-2671 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-2671?

CVE-2026-2671 has a CVSS score of 3.1 (LOW).

HOME VULNERABILITIESCVE-2026-2671

LOW

CVE-2026-2671

CWE-310Published: March 7, 2026· Updated: Mar 9, 2026

3.1

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.4th

Official Description

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2026-2671 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.