CVE-2026-86405

CVSS 9.8 (critical) · published 2026-10-09

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

Weakness: CWE-347

Source: NVD CVE-2026-86405

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.