CVE-2023-42136: Paxtechnology Paydroid

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word. The attacker must have shell access to the device in order to exploit this vulnerability.

Affected products

• Paxtechnology Paydroid: up to and including 8.1.0_sagittarius_11.1.50_20230614

Published 2024-01-15. Last modified 2026-06-17.