CVEvulnerability
CVE-2026-86405
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2026-10-09
- Last modified
- 2026-10-12
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-347
Description
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation.
This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287 siberguvenlik.gov.tr