Is CVE-2026-85531 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85531?

CVE-2026-85531 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-85531

Description

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.