CVE-2026-18591

LOW 2.1

Meesho Online Shopping App com.meesho.supply cleartext storage

CVSS Score

2.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the component com.meesho.supply. Such manipulation of the argument user_id/phone number/email address/name leads to cleartext storage of sensitive information. The attack can be executed directly on the physical device. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

CWE	CWE-312 CWE-310
Vendor	meesho
Product	online shopping app
Published	Aug 3, 2026

Stay Ahead of the Next One

Get instant alerts for meesho online shopping app

Be the first to know when new low vulnerabilities affecting meesho online shopping app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Meesho / Online Shopping App

20260607

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/385419 vuldb.com: https://vuldb.com/vuln/385419/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18591 vuldb.com: https://vuldb.com/submit/850975 github.com: https://github.com/honestcorrupt/MEESHO-CVE_REQUEST_NEW drive.google.com: https://drive.google.com/file/d/1tUOME-DfuTVDnbCxvDPKNAZjrRl0GmJQ/view

Credits

🔍 honest_corrupt (VulDB User) VulDB CNA Team