CVE-2026-16272

Published: Sep 9, 2026Modified: Oct 1, 2026Deferred

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: iletisim@usom.gov.tr (Secondary)

Description

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.

Related CWEs

CWE-348

Use of Less Trusted Source

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1034

Source: iletisim@usom.gov.tr

Timeline

No history available yet.