Authorization Bypass via User-Controlled Cryptographic Keys

Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026.

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-2346 represents a critical authorization bypass vulnerability in Menulux Software Inc.'s mobile application (versions through 12.05.2026) that exploits user-controlled cryptographic key management. This CWE-639 weakness allows attackers to manipulate authentication mechanisms by controlling key material, potentially compromising software integrity across the application's attack surface. Organizations deploying this mobile app face immediate risk of unauthorized access, data exfiltration, and lateral movement—particularly concerning given the 9.8 CVSS score indicating near-maximum severity. Any organization using Menulux's mobile app should treat this as a priority remediation target.

Casky.ai's 283 matching security skills leverage Claude AI's extended reasoning to correlate this vulnerability with MITRE ATT&CK techniques TA0004 (Privilege Escalation) and TA0006 (Credential Access). Practitioners using Casky will identify attack patterns where adversaries exploit user-controlled keys to escalate privileges within the application context and extract authentication credentials. The platform's skills help practitioners detect behavioral indicators such as unexpected key generation events, unauthorized cryptographic operations, and anomalous authorization decisions—patterns that surface when defenders map the vulnerability against real-world exploitation chains. By anchoring analysis to MITRE ATT&CK, practitioners gain clarity on which defensive techniques (detection, hunting, architecture controls) most effectively disrupt this specific attack vector.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-2346.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-2346

Casky has 283 skills that investigate the attack patterns behind CVE-2026-2346. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn