CVE-2023-26980: Pax Paydroid

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher will be loaded before any user applications.

Affected products

• Pax Paydroid: version 8.1 only

Published 2023-04-14. Last modified 2026-06-17.