Authentication Bypass via Signature Verification Flaw in Drupal Commerce Paybox

Publication date: 2026-01-28

Last updated on: 2026-03-09

Assigner: Drupal.org

Description

Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-03-09

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2026-0750

EUVD

EUVD-2026-4875

Affected Vendors & Products

Vendor	Product	Version / Range
verifone	commerce_paybox	From 7-x-1.0 (inc) to 7.x-1.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-347	The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Verification of Cryptographic Signature in the Drupal Commerce Paybox module for Drupal 7.X. It allows an attacker to bypass authentication by exploiting the failure to properly verify cryptographic signatures in versions from 7-x-1.0 through 7.X-1.5.

Impact Analysis

This vulnerability can allow an attacker to bypass authentication controls, potentially gaining unauthorized access to the system or sensitive functions within the Drupal Commerce Paybox module. This could lead to unauthorized transactions or manipulation of commerce-related data.

Hi! I’m here to help you understand CVE-2026-0750. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70