CVE-2026-85531
Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module
Published 9 Oct 2026 · updated 9 Oct 2026 · Deferred
9.8 Critical · CVSS 3.1, usom.gov.tr
Description
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.