mewebstudio

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

mewebstudio records in CISA KEV

No mewebstudio vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81665 CVE-2026-118377 · GHSA-qfwr-rmpq-mvmx

Unverified 3D callbacks in mews/pos let attackers forge payments

MEDIUM 43

mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthenticated attackers to forge payment results by submitting unverified callbacks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0018 Published 2026-10-28 No fix listed CWE-345

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0