High severity7.5NVD Advisory· Published Jul 9, 2026· Updated Jul 9, 2026

CVE-2026-13462

Description

PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.

Affected products

PayRange/PayRangellm-fuzzy
Range: <=7.0.7

Patches

Vulnerability mechanics

References

cwe.mitre.org/data/definitions/295.htmlnvd
kb.cert.org/vuls/id/152953nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000