PT-2026-27110 · Shenzhen Hcc Technology · Mpos M6 Plus

Davimo + 1 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4584

NVD

CVSS v2.0

1.8

Low

AV:A/AC:H/Au:N/C:P/I:N/A:N

A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack requires access to the local network. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2026-4584

Affected Products

Mpos M6 Plus

References · 5

• 🔥 https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-3-DataExposure.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4584 · Security Note
• https://vuldb.com/?submit.775435 · Note
• https://vuldb.com/?ctiid.352421 · Note
• https://vuldb.com/?id.352421 · Note