PT-2026-27110 · Shenzhen Hcc Technology · Mpos M6 Plus

Davimo + 1 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4584

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Shenzhen HCC Technology MPOS M6 PLUS version 1V.31-N

Description A flaw in the Cardholder Data Handler component allows for the cleartext transmission of sensitive information through manipulation. This issue requires local network access and is characterized by high complexity, making exploitation difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2026-4584

Affected Products

Mpos M6 Plus

References · 5

• 🔥 https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-3-DataExposure.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4584 · Security Note
• https://vuldb.com/?id.352421 · Note
• https://vuldb.com/?ctiid.352421 · Note
• https://vuldb.com/?submit.775435 · Note