CVE-2026-86405

{
  "etk_id": "ETK-2026-1073",
  "cve_id": "CVE-2026-86405",
  "display_id": "CVE-2026-86405",
  "ghsa_id": "GHSA-7px9-f7pg-h379",
  "euvd_id": "EUVD-2026-95755",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper signature verification in PrestaShop Virtual POS Module",
  "summary": "PrestaShop Virtual POS Module versions 26.8.1 through versions before 26.9.1 improperly validate cryptographic signatures. An attacker may be able to spoof signatures where the vulnerable validation path is used. The advisory does not provide further preconditions.",
  "mitigation": "Upgrade PrestaShop Virtual POS Module to version 26.9.1 or later. Until upgraded, limit exposure of workflows that rely on the module's signature validation.",
  "vendor": "Sipay Electronic Money and Payment Services Inc.",
  "product": "PrestaShop Virtual POS Module",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 26.8.1, < 26.9.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "26.9.1"
      ],
      "package_name": "PrestaShop Virtual POS Module",
      "purl": null
    }
  ],
  "cwes": [
    347
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.002,
  "epss_percentile": 0.0941,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 78.48354826666667,
  "t0_at": "2026-10-09T12:52:43.902000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-09T14:40:55.555784+00:00",
      "days": 0.07513488175925925,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T12:52:43.902000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-09T12:52:43.902000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T12:52:43.902000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86405"
    }
  }
}