CVE-2025-46018

CVE-2025-46018 affects CSC Pay Mobile App, version 2.19.4 (fixed in 2.20.0). A vulnerability in the Bluetooth-based payment authentication module allows a user to bypass payment authorization by disabling Bluetooth at a specific point during a transaction, potentially enabling unauthorized use of...