CVE-2026-86405
Deferred Deferred - Pending Action

Improper Signature Validation in PrestaShop Virtual POS Module

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-09
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-86405
EUVD
EUVD-2026-95755

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module 26.8.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper verification of cryptographic signatures in the Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module. It allows attackers to spoof signatures by bypassing proper validation, potentially leading to unauthorized transactions or data manipulation.

Impact Analysis

This vulnerability could allow attackers to forge valid payment transactions or alter transaction data, leading to financial losses, unauthorized access to sensitive information, or fraudulent activities. Systems running affected versions of the module are at risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR due to potential unauthorized access to personal data and HIPAA due to compromised transaction integrity. Organizations must ensure proper validation to meet regulatory requirements for data protection and transaction security.

Mitigation Strategies

Update the PrestaShop Virtual POS Module to version 26.9.1 or later to address the improper cryptographic signature verification issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86405. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart