CVE-2026-0750CWE-347

Payment bypass in Commerce Paybox

High · published January 28, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-01-28T18:53Z
EPSS history
Timeline
  • 28 JAN 18:53Z
    Payment bypass in Commerce Paybox
    cvelistv5