Which versions of Mpos M6 Plus are affected by EUVD-2026-14399?

Organizations using A vulnerability should be aware of moderate risk from CVE-2026-4583 rated CVSS 5.0. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for EUVD-2026-14399?

Yes, a public proof-of-concept exploit is available for EUVD-2026-14399. Prioritise patching immediately. EPSS: 0.0%.

Mpos M6 Plus EUVD-2026-14399

Q: What is the CVSS score of EUVD-2026-14399?

EUVD-2026-14399 has a CVSS 4.0 base score of 1.3 (Low). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4583 LOW

Authentication Bypass by Capture-replay (CWE-294)

2026-03-23 VulDB

GHSA-mh2m-j5hq-vv2j

Authentication Bypass Mpos M6 Plus

1.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.3 LOW

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

2.3 (LOW) 1.3 (LOW)

Severity Changed

Apr 24, 2026 - 16:37 NVD

MEDIUM LOW

CVSS changed

Apr 24, 2026 - 16:37 NVD

5.0 (MEDIUM) 2.3 (LOW)

PoC Detected

Mar 23, 2026 - 14:31 vuln.today

Public exploit code

EUVD ID Assigned

Mar 23, 2026 - 10:45 euvd

EUVD-2026-14399

Analysis Generated

Mar 23, 2026 - 10:45 vuln.today

CVE Published

Mar 23, 2026 - 10:31 nvd

MEDIUM 5.0

DescriptionCVE.org

A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this issue is some unknown functionality of the component Bluetooth Handler. Performing a manipulation results in authentication bypass by capture-replay. The attack must originate from the local network. The attack is considered to have high complexity. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

This vulnerability is an authentication bypass in the Bluetooth Handler component of Shenzhen HCC Technology MPOS M6 PLUS version 1V.31-N, exploitable via capture-replay attacks. An unauthenticated attacker on the local network can manipulate Bluetooth communications to bypass authentication mechanisms and gain unauthorized access with high attack complexity. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	While the CVSS 3.1 base score of 5.0 (Medium) suggests moderate severity, multiple risk signals warrant closer attention. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker gains physical or wireless proximity to a retail environment housing MPOS M6 PLUS terminals and uses a Bluetooth sniffer to capture legitimate pairing or authentication frames exchanged between the terminal and an authorized management device. The attacker then replays these captured frames to the terminal using a custom Bluetooth application (such as the publicly available GitHub proof-of-concept), causing the terminal to accept the replayed authentication without validation. …
Remediation	No official patch from Shenzhen HCC Technology is available due to vendor non-response; organizations should contact the vendor directly to request security updates or consider alternative payment terminal solutions. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. …

Threat intelligence, references, and detailed analysis are available after sign-in.

EUVD-2026-14399 vulnerability details – vuln.today

Back