Pax Technology

8 CVEs across 5 Pax Technology products. Browse Pax Technology vulnerabilities, severities, and proof-of-concept exploits.

Pax Technology products with known CVEs

ProductCVEs
Pos Terminals3
Q803
A501
A9201
A920 Pro1
Pax Technology CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19910High7.52026-08-14PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker…
CVE-2026-19909High7.52026-08-14PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra…
CVE-2026-19908High7.12026-08-14PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and…
CVE-2023-4818High7.62024-01-15PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be u…
CVE-2023-42137High7.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malici…
CVE-2023-42136High7.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account pr…
CVE-2023-42135Medium6.82024-01-15PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the in…
CVE-2023-42134Medium6.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently local code…