PatchTheCVEmpay vulnerabilities and fixes
Recent CVEs affecting mpay, with upgrade or downgrade steps. 3 tracked.
mpay has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-01-19. Highest priority: CVE-2026-1152 (score 29/100).
- CVE-2026-1153 MEDIUM 4.3 UPGRADE A vulnerability was detected in technical-laohu mpay up to 1.2.4
- CVE-2026-1152 MEDIUM 4.7 UPGRADE A security vulnerability has been detected in technical-laohu mpay up to 1.2.4
- CVE-2026-1151 LOW 2.4 UPGRADE A weakness has been identified in technical-laohu mpay up to 1.2.4
FAQ
How do I fix mpay vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mpay being exploited right now?
None of the tracked mpay CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mpay CVE should I patch first?
CVE-2026-1152 currently ranks highest (29/100): A security vulnerability has been detected in technical-laohu mpay up to 1.2.4.