What is the CVSS score of CVE-2026-26125?

CVE-2026-26125 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Payment Orchestrator Service are affected by CVE-2026-26125?

A high-severity privilege escalation vulnerability in the Payment Orchestrator Service could allow attackers to bypass access controls and gain unauthorized elevated privileges within payment…. A patch is available.

How to fix or mitigate CVE-2026-26125?

Within 24 hours: Inventory all systems running the affected Payment Orchestrator Service version and restrict administrative access to the service. Within 7 days: Implement network segmentation to isolate payment orchestration services from untrusted networks and enable detailed logging/monitoring of privilege elevation attempts. Within 30 days: Develop and test a remediation plan including vendor patching once available, or evaluate alternative payment orchestration solutions if patch timeline is unacceptable.