CVE-2026-85531 — Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Impro…
Published: 2026-10-09 · CVSS: 9.8 · CVSS 3.1
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7