---
id: CVE-2026-86405
title: >-
  Improper verification of cryptographic signature vulnerability in Sipay
  Electronic Money and Payment Services Inc
summary: >-
  Improper verification of cryptographic signature vulnerability in Sipay
  Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module
  allows Signature Spoofing by Improper Validation.


  This issue affects PrestaShop Virtual POS…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-347
published: '2026-10-09'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T23:17:45.413'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86405'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287'
    label: iletisim@usom.gov.tr
tags:
  - nvd
  - cve.org
epss: 0.00201
epssPercentile: 0.09895
ingestedAt: '2026-10-09T13:58:52.545Z'
vendor: Sipay Electronic Money and Payment Services Inc.
product: PrestaShop Virtual POS Module
affected:
  - prestashop_virtual_pos_module >= 26.8.1 < 26.9.1
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-12T22:48:31.496815Z'
---

## Overview

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation.

This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.