SSL Bypass Vulnerability in PayRange Android App
CVE-2026-13462

7.5HIGH

Key Information:

Vendor

Payrange

Status
Payrange
Vendor
CVE Published:
9 July 2026

What is CVE-2026-13462?

The PayRange Android app versions up to 7.0.7 are affected by an SSL bypass vulnerability, enabling malicious actors to bypass SSL protections. This vulnerability permits the application to accept invalid SSL certificates in webviews, thereby exposing users' sensitive information to remote, unauthenticated attackers. It's crucial for users of the affected version to update their application to prevent potential data breaches.

Affected Version(s)

PayRange 7.0.7

References

https://cwe.mitre.org/data/definitions/295.html
https://kb.cert.org/vuls/id/152953

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.