CashDro 3 Administration Panel vulnerabilities

2 known vulnerabilities in CashDro 3 Administration Panel from CashDro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  CashDro 3 Administration Panel: Missing Authorization

  CVE-2026-8077May 8, 2026CashDro

  Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By modifying the binary string in the ‘Permissions’ field of the JS

• 9.3 Critical severity

  CashDro 3 Administration Panel: Use of Weak Credentials

  CVE-2026-8076May 8, 2026CashDro

  Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication. The system supports the use of PIN-based credentials, maintaining compatibility with POS software integr