CVE-2026-13462

Description

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.

CVSS Vector

References

• https://cwe.mitre.org/data/definitions/295.html
• https://kb.cert.org/vuls/id/152953