CVE-2026-5682

CVE-2026-5682 is a cryptographic weakness discovered in the Meesho Online Shopping App for Android, affecting versions up to 27.3. The vulnerability exists in an unspecified function within the /api/endpoint of the com.meesho.supply component, where risky cryptographic algorithms are implemented. The vulnerability carries a CVSS v3.1 score of 3.7 (LOW severity) with a network-based attack vector requiring high complexity and substantial technical sophistication. The attack requires no user interaction or privileges, but impact is limited to confidentiality, with no integrity or availability compromise. The low EPSS score of 0.00016 indicates minimal real-world exploitation probability relative to other CVEs. While exploit code has been publicly disclosed, the vulnerability shows no evidence of active exploitation. The CVE does not appear on the CISA Known Exploited Vulnerabilities catalog and maintains an inactive status on threat tracking lists. Community attention remains minimal, suggesting this technical disclosure has not yet attracted significant threat actor interest despite public availability of proof-of-concept materials.