CVE-2026-86405 — Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop

CVE-2026-86405

Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop PUBLISHED

Description (CNA)

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

Affected (CNA)

Vendor / product	Versions
Sipay Electronic Money and Payment Services Inc. / PrestaShop Virtual POS Module	affected 26.8.1 before 26.9.1

CWE

CWE-347

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.