CVE-2026-85531

CVSS 9.8 (critical) · published 2026-10-09

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.

Weakness: CWE-347

Source: NVD CVE-2026-85531

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1286

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.