CyberSecBulletin

CashDro vulnerabilities

We track 2 vulnerabilities in CashDro products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest CashDro vulnerabilities

  • 8.6 High severity

    CashDro 3 Administration Panel: Missing Authorization

    CVE-2026-8077CashDro

    Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JS

  • 9.3 Critical severity

    CashDro 3 Administration Panel: Use of Weak Credentials

    CVE-2026-8076CashDro

    Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication. The system supports the use of PIN-based credentials, maintaining compatibility with POS software integr