Description


A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack can only be performed from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related CPE's


Could not find any relations

Weaknesses



CWE-1021

CVSS impact metrics


CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

3.5 · Low

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-12T16:17:03.713Z

22 hours ago

Last modified

2026-10-13T13:29:12.567Z

1 hour ago