CVE-2026-85531
Deferred Deferred - Pending Action

Signature Spoofing in OpenCart Virtual POS Module

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-09
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-85531
EUVD
EUVD-2026-95747

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module 26.8.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper verification of cryptographic signature issue in the Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module. It allows attackers to spoof signatures through improper validation, potentially leading to unauthorized transactions or data manipulation.

Impact Analysis

This vulnerability could allow attackers to bypass security controls, perform unauthorized transactions, or alter transaction data. If exploited, it may lead to financial losses, data breaches, or compromised payment integrity for users of the affected OpenCart Virtual POS Module.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR (data protection) and HIPAA (healthcare data security) by enabling unauthorized access or tampering with sensitive payment or personal data. Organizations using the affected module may face legal penalties or loss of certification.

Mitigation Strategies

Update the OpenCart Virtual POS Module to version 26.9.1 or later to address the improper cryptographic signature verification issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85531. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart