Güvenlik Danışarlıklarına Dön

WHMCS CVE-2026-16272

WHMCS is affected by CVE-2026-16272. Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API (v9x) WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API (v9x) WHMCS Module: from v9.0.0 before v9.0.3. CVSS base score: 9.1.

Critical 9.1 CVSS
WHMCS

SharedLicense lisansı altında bunun anlamı

Your SharedLicense license itself is not affected — this is a vulnerability in WHMCS software, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell WHMCS under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API (v9x) WHMCS Module allows Exploitation of Trusted Identifiers.

This issue affects PayTR Virtual Pos iFrame API (v9x) WHMCS Module: from v9.0.0 before v9.0.3.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-16272

Sıkça Sorulan Sorular

What is CVE-2026-16272?
Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API (v9x) WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API (v9x) WHMCS Module: from v9.0.0 before v9.0.3.
Is CVE-2026-16272 being exploited in the wild?
No confirmed exploitation has been announced. Patch on your normal schedule and watch the vendor advisory for updates.
How do I fix CVE-2026-16272?
Update WHMCS to the patched release.Then confirm the running version matches the patched release listed above.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin