Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

70.4

Published

2026-08-27

Status

Published

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account.

Weaknesses

CWE-862

Coverage 1

vulnerability

PayRange API

A critical vulnerability in the PayRange API allows unauthorized access to sensitive device information and potential denial-of-service attacks. The vulnerability stems from a lack of proper authorization on management e…

CISA Advisories · 5d ago Critical

CVE-2026-18965USCAvulnerabilityicscontrol systems

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-237-04
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...