CVE-2026-86405: Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop
Published Oct 9, 2026
·Updated
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation.
This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.
Affected Software
1 affected component
Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module>=26.8.1<26.9.1
Event History
Oct 9, 2026
CVE Published
via MITRE·12:52 PM
Data Sourced
via MITRE·12:52 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module versions from 26.8.1 up to, but not including, 26.9.1 are affected.
2
Does exploitation require authentication or user interaction?
No. The listed vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the potential impact of successful exploitation?
Successful signature spoofing can affect confidentiality, integrity, and availability at a high level, according to the supplied CVSS vector.