CVE-2026-86405criticalCWE-347

CVE-2026-86405: critical vulnerability in Sipay Electronic Money and Payment Services Inc.

Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop

Published · Updated

Follow this CVE+ Monitor PrestaShop Virtual POS Module

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.2%
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Sipay Electronic Money and Payment Services Inc. · PrestaShop Virtual POS Module