CVE-2026-2671 Details
Description
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability exists in the Mendi Neurofeedback Headset V4, specifically within the Bluetooth Low Energy (BLE) Handler component. This vulnerability allows for the unauthorized interception of functional near-infrared spectroscopy (fNIRS) sensor data, which is transmitted in cleartext without any encryption. The issue arises from the failure to implement secure BLE pairing mechanisms or application-layer encryption for fNIRS data transmission. As a result, an attacker within BLE radio range can passively capture data streams using common wireless analysis tools, such as the Nordic nRF Sniffer or a modified smartphone. The intercepted data can be decoded to reveal real-time prefrontal cortex activity, all without the user's knowledge or consent. This exploitation leaves no detectable traces on the device or its software.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 7, 2026CISA-ADP
Assessed Mar 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-310 | Cryptographic Issues | [email protected] |
| CWE-319 | Cleartext Transmission of Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Mendi Neurofeedback Headset V4 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 16, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 7, 2026 | New CVE Received | [email protected] |