Skip to content
OpenAdvisories
High · 7.5 CVE-2026-13462 EUVD-2026-42637GHSA-wpmg-2gv8-722g

PayRange for Android, version 7.0.7, contains an SSL bypass vulnerability

Published Jul 9, 2026 · Updated Jul 9, 2026 · Assigned by certcc

Description

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.

Affected products

VendorProductAffectedFixed
PayRange PayRange 7.0.7 —

References