CVE-2026-118377 | mewebstudio pos up to 2.0.0 3D Host handler check3DHash status/amount/order ID data authenticity

October 28, 2026 Yanac

A vulnerability marked as problematic has been reported in mewebstudio pos up to 2.0.0. Affected by this vulnerability is the function check3DHash of the component 3D Host handler. This manipulation of the argument status/amount/order ID causes insufficient verification of data authenticity.

The identification of this vulnerability is CVE-2026-118377. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More