Skip to content
OpenAdvisories
High · 8.7 CVE-2026-0750 EUVD-2026-4875GHSA-mxrg-rhmf-2mjf

Payment bypass in Commerce Paybox

Published Jan 28, 2026 · Updated Jan 28, 2026 · Assigned by drupal

Description

Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5.

Affected products

VendorProductAffectedFixed
Drupal Drupal Commerce Paybox 7-x-1.0 – ≤ 7.x-1.5 —

References