CVE-2026-61978

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

Broken Access Control vulnerability in Secure Card Gateway for ePay Paycenter (Piraeus Bank) versions up to 1.0.32, exploitable without authentication.

Risk Assessment

Unauthenticated users can access administrative functions, potentially leading to modification of payment settings or privilege escalation.

Recommendation

Update the Secure Card Gateway for ePay Paycenter (Piraeus Bank) plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions.