---
id: CVE-2026-86405
title: >-
  Improper verification of cryptographic signature vulnerability in Sipay
  Electronic Money and Payment Services Inc
summary: >-
  Improper verification of cryptographic signature vulnerability in Sipay
  Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module
  allows Signature Spoofing by Improper Validation.


  This issue affects PrestaShop Virtual POS…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-347
published: '2026-10-09'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T13:21:13.267'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86405'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287'
    label: iletisim@usom.gov.tr
tags:
  - nvd
ingestedAt: '2026-10-09T13:58:52.545Z'
---

## Overview

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation.

This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.