Skip to content

CVE-2026-16025

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 8, 2026
Last Seen
September 8, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-16025 and CVE-2026-16037: Vulnerabilities in PayTR Virtual Pos iFrame API57.8

Two critical vulnerabilities have been identified in the PayTR Virtual Pos iFrame API (v9x) WHMCS Module, both published on 2026-09-08. CVE-2026-16025 involves improper validation of input quantities, allowing attackers to manipulate transaction data, potentially leading to revenue loss and customer...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CWE-20 - Improper Input ValidationWhmcs