CVEvulnerability
CVE-2026-85531
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2026-10-09
- Last modified
- 2026-10-12
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-347
Description
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation.
This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1286 siberguvenlik.gov.tr