Critical
Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.
Announced Group revision 1
Original source ↗CVE-2026-86405
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-86405
PrestaShop Virtual POS Module
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Sipay Electronic Money and Payment Services Inc.",
"product": "PrestaShop Virtual POS Module",
"versions": [
{
"status": "affected",
"version": "26.8.1",
"lessThan": "26.9.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-86405
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #17167 · Revision 1
- Added to Heist Feed
- Publisher date