PT-2026-87109
CVE-2026-16037
·
Published
2026-09-08
·
Updated
2026-10-01
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2
Description
An observable timing discrepancy exists in the PayTR Virtual Pos iFrame API WHMCS Module. This flaw allows for Black Box Reverse Engineering, a technique used to deduce the internal logic of a system by analyzing the time it takes to process different inputs.
Recommendations
Update PayTR Virtual Pos iFrame API WHMCS Module to version 9.0.3.
Found an issue in the description? Have something to add? Feel free to write us 👾