Unrated severityNVD Advisory· Published Jul 9, 2026· Updated Jul 9, 2026
IDOR in PAVO Inc.'s PAVO Pay
CVE-2026-1989
Description
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers.
This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
2- Range: <=09072026
Patches
Vulnerability mechanics
References
1- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0521mitregovernment-resource
News mentions
0No linked articles in our index yet.