PPAX Technology

Products

Exploited and recent CVEs

• CVE-2026-19910 High 7.5 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability 0.3%
• CVE-2026-19908 High 7.1 PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability 0.4%
• CVE-2026-19909 High 7.5 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability 0.5%
• CVE-2023-42137 High 7.8 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have 0.5%
• CVE-2023-42136 High 7.8 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with 0.5%
• CVE-2023-42135 Medium 6.8 PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific p 0.6%
• CVE-2023-42135 Medium 6.8 PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific p 0.6%
• CVE-2023-42134 Medium 6.8 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently local code execution via hidden command. The a 0.6%
• CVE-2023-4818 High 7.6 PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used.  The attacker must have physical 0.7%