CVE-2026-16272Patch

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1034

Weakness type (CWE)

CWE-348

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

Rıdvan Yağlı@ridvanyagli46d
Patch
🔴 PayTR'nin WHMCS modülünde kritik güvenlik açığı! TR-CERT tarafından yayınlanan güvenlik bildirimine göre PayTR Virtual POS iFrame API WHMCS Module v9x'te CVE-2026-16272 (CVSS 9.1) olarak takip edilen kritik bir güvenlik açığı tespit edildi. Açık, istemci IP adresinin güvenilmeyen HTTP header'lar üzerinden manipüle edilebilmesine (Client IP Spoofing) yol açıyor. Etkilenen sürümler: 9.0.0 – 9.0.2 Düzeltilen / yamalanan sürüm: 9.0.3 WHMCS üzerinde PayTR ödeme modülünü kullananların sürümlerini kontrol ederek 9.0.3 veya daha yeni bir sürüme güncellemesi gerekiyor.
Post summary
The post discloses CVE-2026-16272, a client IP spoofing flaw in PayTR WHMCS Module v9x (CVSS 9.1) and announces the fix is available as of v9.0.3 with no evidence of exploitation or a PoC.
321872.4K
2.4K followersView on X

Explore more

Back to dashboard