CVE-2026-13462
High · 7.5CVSS
7.5
EPSS
—
Published
Jul 9, 2026
CISA due date
—
The record
PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|