PT-2026-5190 · Unknown+1 · Drupal Commerce Paybox+1

Dave Hernandez · Published 2026-01-28 · Updated 2026-03-09 · CVE-2026-0750

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Drupal Commerce Paybox versions 7.x-1.0 through 7.x-1.5

Description A flaw exists in the cryptographic signature verification process within Drupal Commerce Paybox on Drupal 7.X, potentially allowing attackers to bypass authentication. This issue could lead to unauthorized access.

Recommendations Update Drupal Commerce Paybox to a version later than 7.x-1.5.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2026-0750

Affected Products

Drupal

Drupal Commerce Paybox

References · 7

• 🔥 https://herodevs.com/vulnerability-directory/cve-2026-0750 · Exploit
• https://osv.dev/vulnerability/CVE-2026-0750 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0750 · Security Note
• https://d7es.tag1.com/security-advisories/commerce-paybox-moderately-critical-payment-bypass-vulnerability · Note
• https://twitter.com/CVEnew/status/2016587738728784267 · Twitter Post
• https://t.me/CVEtracker/43163 · Telegram Post
• https://t.me/cveNotify/154804 · Telegram Post