{"vulnerability": "cve-2026-86405", "sightings": [{"uuid": "91988c1a-6986-42c1-acd2-1a7253606f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117411193134892551", "content": "CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper cryptographic signature checks allow spoofing & data tampering. Patch not confirmed \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity", "creation_timestamp": "2026-10-09T13:30:30.381706Z"}, {"uuid": "f6e8d4b6-50f5-422d-a96a-82db26ef9d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r", "content": "CRITICAL flaw (CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper signature checks allow spoofing & unauthorized actions. Monitor for vendor patches & restrict access. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature...", "creation_timestamp": "2026-10-09T13:30:32.253732Z"}, {"uuid": "5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz", "content": "CVE-2026-86405 - Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop\nCVE ID : CVE-2026-86405\n \n Published : Oct. 9, 2026, 12:52 p.m. | 37\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature vulnerability in Sipay Electronic Money...", "creation_timestamp": "2026-10-09T13:59:28.247433Z"}, {"uuid": "6937a706-2583-4a4a-970a-fda319a5079b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27", "content": "\ud83d\udea8 CVE-2026-86405 \u2014 CVSS 9.8 CRITICAL\n\nImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86405\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T14:07:47.751039Z"}, {"uuid": "2904c45a-e023-41e7-b203-cbcb72c3aed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o", "content": "CVE-2026-86405 - prestashop virtual pos module\nThe PrestaShop Virtual POS extension from Sipay Electronic Money can be tricked into accepting forged payment signatures, letting attackers make payments appear legitimate. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-09T23:30:05.348007Z"}]}