machine payments protocol vulnerabilities and fixes

Recent CVEs affecting machine payments protocol, with upgrade or downgrade steps. 4 tracked.

Also searched as: machinepaymentsprotocol.

machine payments protocol has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-08-19. Highest priority: CVE-2026-73541 (score 46/100).

• CVE-2026-73829 LOW 3.7 UPGRADE Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to re
• CVE-2026-73541 HIGH 8.2 UPGRADE Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to
• CVE-2026-73136 HIGH 7.5 UPGRADE Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid re
• CVE-2026-67581 HIGH 7.5 UPGRADE Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid

FAQ

How do I fix machine payments protocol vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is machine payments protocol being exploited right now?

None of the tracked machine payments protocol CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which machine payments protocol CVE should I patch first?

CVE-2026-73541 currently ranks highest (46/100): Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to.

RSS feed for machine payments protocol · ← Back to latest CVEs