Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
Attackers exploited CVE-2026-18965 to bypass PayRange API authorization, gaining unrestricted access to device details across the entire payment network. This initial compromise enabled reconnaissance of network topology and potential lateral movement to payment terminals. Runtime segmentation could help limit such blast radius expansion. 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/payrange-api-cve-2026-18965-missing-authorization-vulnerability #CloudSecurity #ZeroTrust
Post summary
Attackers actively exploited CVE‑2026‑18965 to bypass PayRange API authorization, enabling unrestricted device access and network reconnaissance across the payment network.
0000046
1.9K followersView on X