CVE-2026-85531 — Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

CVE-2026-85531

Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x PUBLISHED

Description (CNA)

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.

Affected (CNA)

Vendor / product	Versions
Sipay Electronic Money and Payment Services Inc. / OpenCart Virtual POS Module	affected 26.8.2 before 26.9.1

CWE

CWE-347

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1286

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.