PayRange API

View CSAF Summary Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose sensitive information, arbitrarily modify the device to cause a denial of service, or alter a devices displayed image. The following versions of PayRange API are affected: PayRange API vers:all/* CVSS Vendor Equipment Vulnerabilities v3 8.8 PayRange PayRange A

Back to dashboard

Threat HighSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedStatus: PublishedCERTOpen original source

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-04

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Aug 25, 2026, 12:00 PM

Ingested (UTC)

Aug 28, 2026, 4:35 AM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

PayRange API
Advisory ID: icsa-26-237-04
View CSAF Summary Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose sensitive information, arbitrarily modify the device to cause a denial of service, or alter a devices displayed image. The following versions of PayRange API are affected: PayRange API vers:all/* CVSS Vendor Equipment Vulnerabilities v3 8.8 PayRange PayRange A
Severity: high
Published (UTC): 2026-08-25T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-04

View original source