TI-2020-19303 CVE-2020-37168 · GHSA-2x94-2hh3-xhp5Ecommerce Systempay 1.0 Production Key Brute ForcePriority HIGH 81Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used for payment signature generation.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00246 · Published 2026-05-13 · No fix listed CWE-328