VULNERABILITY INTELLIGENCE

CVE-2026-13462

CVSS score7.5 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-07-09

Last modified2026-07-09

Description

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.