CVE-2026-124623

A security flaw in PipraPay 3.0.0 within the ZIP Archive Handler component allows for unrestricted upload via the system-settings-import function (located at /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import). This vulnerability can be exploited remotely through manipulation o...

EUVD-2026-120049

A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload. The attack is...