SZB-9e871ad197
EUVD-2026-112989 reports PHP object injection in myPOS Checkout
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- myPOS Payments
- Product
- myPOS Checkout
- First seen
Summary
The EU Vulnerability Database (EUVD) lists a PHP object injection flaw, scored 7.2 (CVSS v3.1), in myPOS Checkout up to version 1.4.5. The listing was published 2026-10-29 and updated 2026-10-30.
If you use myPOS Payments
Update myPOS Checkout to the latest vendor release
Restrict shop manager accounts to trusted users until patched
Check the myPOS vendor advisory for the fixed version
What the sources say 1
· Mastodon: “Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.” Source