CVE-2026-108901

LOW 3.5

Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layer

CVSS Score

3.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack can only be performed from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-1021
Vendor	shenzhen hcc technology
Product	mpos m6 plus
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for shenzhen hcc technology mpos m6 plus

Be the first to know when new low vulnerabilities affecting shenzhen hcc technology mpos m6 plus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Shenzhen HCC Technology / MPOS M6 PLUS

1.31-N

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/416692 vuldb.com: https://vuldb.com/vuln/416692/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108901 vuldb.com: https://vuldb.com/submit/976764 github.com: https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-4-DisplayInjection.md

Credits

🔍 davimo (VulDB User) davimo (VulDB User) VulDB CNA Team