CVE-2026-13462PayRange for Android, version 7.0.7, contains an SSL bypass vulnerability

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.

7.5 HIGHEPSS 0.30%Not in KEVNVD: Deferred

Last updated: 2026-07-09 20:16 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.5	HIGH	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CVE ID: CVE-2026-13462
Status: Deferred
Assigner (CNA): certcc
Published: Jul 9, 2026
Last modified: 2026-07-09 20:16 UTC

Sources

NVD
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-08 07:31 UTC.