CVE-2022-26579: Paxtechnology Paydroid

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must have shell access to the device and gain root privileges in order to exploit this vulnerability.

Affected products

• Paxtechnology Paydroid: version 7.1.1_virgo_v04.3.26t1_20210419 only

Published 2022-12-16. Last modified 2026-06-17.