CVE-2026-5682: Meesho Online Shopping App com.meesho.supply endpoint risky encryption

Severity: low (CVSS 3.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-06 · updated 2026-07-24
Weakness: CWE-310

Description

A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Affected products

Meesho Online Shopping App: 27.0, 27.1, 27.2, 27.3

References

https://github.com/honestcorrupt/MEESHO-CVE
https://vuldb.com/submit/792717
https://vuldb.com/vuln/355509
https://vuldb.com/vuln/355509/cti

Get alerted when CVE-2026-5682 or the next vulnerability affects your stack