CyberSecBulletin

Mewebstudio vulnerabilities

We track 1 vulnerability in Mewebstudio products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Mewebstudio vulnerabilities

  • 7.5 High severity

    pos: Insufficient Verification of Data Authenticity

    CVE-2026-118377Mewebstudio

    mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthenticated attackers to forge payment results by submitting unverified callbacks. GarantiPos, PayForPos and InterPos 3D Pay and 3D Host handlers sk