CVE-2026-1989 – IDOR in PAVO Inc.’s PAVO Pay

CVE ID :CVE-2026-1989

Published : July 9, 2026, 8:56 a.m. | 52 minutes ago

Description :Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers.

This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…