CVE-2026-85531

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 2 mentions (2026-10-09); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-10-09: 2Mentions · 2026-10-10: 110-0910-10
Referenced assets2 URLs
Full discourse3 posts
  • Sekme@sekmedaily

    Sipay PrestaShop & OpenCart Sanal POS’ta CVSS 9.8 kritik açık:• CVE-2026-86405 (PrestaShop) • CVE-2026-85531 (OpenCart)Kriptografik imza hatası nedeniyle sahte ödeme onayı ile ödeme kontrolü baypas edilebiliyor.Acilen 26.9.1+ sürüme güncelleyin.

    00022414
    41 followersView on X
  • ThreatAft@ThreatAft

    🚨 CVSS 9.8 — Sipay Virtual POS signature spoofing hits OpenCart & PrestaShop CVE-2026-85531 + CVE-2026-86405: 🔗 https://threataft.com/articles/sipay-virtual-pos-signature-spoofing-cve-2026-85531-86405 #CVE #PaymentSecurity #OpenCart #PrestaShop #CyberSecurity

    01010588
    47 followersView on X
  • fintekwins@fintekwins

    Sanal POS kullanan e-ticaret işletmelerine önemli güvenlik uyarısı! 🔐 Sipay OpenCart Sanal POS Modülünde Güvenlik Açığı Tespit Edildi! T.C. Cumhurbaşkanlığı Siber Güvenlik Başkanlığı, Sipay tarafından geliştirilen OpenCart Sanal POS Modülü’nde CVE-2026-85531 kodlu güvenlik açığı tespit edildiğini duyurdu. https://www.fintekwins.com/sipay-opencart-sanal-pos-modulunde-guvenlik-acigi-tespit-edildi/

    0000089
    187 followersView on X

Explore more