CVE-2026-13462

PayRange for Android, version 7.0.7, contains an SSL bypass vulnerability

High · published July 9, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00303 · 21.8th percentile
Published
2026-07-09T17:10Z
EPSS history
Timeline
  • 09 JUL 17:10Z
    PayRange for Android, version 7.0.7, contains an SSL bypass vulnerability
    cvelistv5