Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalatio…

published 2021-05-07 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-23704

cvss: 8.1; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.4%; EPSS 1.4% chance of exploitation in 30 days, percentile 72%
public exploits: 0; none known

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTORE marketplace endpoints allow an authenticated user to read and write data not owned by them, including third-party users, application and payment terminals, where an attacker can impersonate any user which may lead to the unauthorized disclosure, modification, or destruction of information.

Exploit prediction

1.40% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

blog.pridesec.com.br https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.1	8.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD	2.0	5.5	AV:N/AC:L/Au:S/C:P/I:P/A:N

Classification

Weakness

CWE-639 Authorization Bypass Through User-Controlled Key

References

blog.pridesec.com.br /p/4c972078-5f01-419e-8bea-cf31ff2e3670/
exploit, third-party-advisory
marketing.paxtechnology.com /about-pax
product
whatspos.com /
product

Sources

CVE List CVE-2020-36126
NVD CVE-2020-36126

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary