CRITICALCVSS v3.1 9.1Vulnerability
CVE-2026-85632
Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message Manipulation via Man-in-the-Middle. This issue affects WooCommerce Virtual POS Module: from 26.8.3 before 26.9.1.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- CRITICAL
- Cvss score
- 9.1
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 9.1
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-85632
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- First seen by Signal
- 2026-11-11T15:41:39+00:00
- Name
- CVE-2026-85632
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Published at
- 2026-11-11T15:17:25.163
- Last modified
- 2026-11-11T15:17:25.163
Related Entities (2)
HAS_WEAKNESS (2)
Related research
Explore deeper with Ninja Signal's threat intelligence graph