Critical
Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.
Announced Source revision 1
Original source ↗CVE-2026-85531
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-85531
OpenCart Virtual POS Module
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Sipay Electronic Money and Payment Services Inc.",
"product": "OpenCart Virtual POS Module",
"versions": [
{
"status": "affected",
"version": "26.8.2",
"lessThan": "26.9.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-85531
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #17166 · Revision 1
- Added to Heist Feed
- Publisher date