Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-18965

Missing Authorization in PayRange API

Description

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PayRange PayRange API

Default version status: unaffected

  • All versionsaffected

References