CVE-2026-18965 in API

Resumen

por MITRE • 2026-08-28

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Icscert
• Reservar: 2026-08-05
• Divulgación: 2026-08-28
• Moderación: aceptado
• Artículo: VDB-396421
• CPE: listo
• CWE: CWE-285 (confirmado)
• CVSS: 8.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Industry, Transportation, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18965
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18965
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18965/