VE
Vendor
Verifone
14
CVEs
0
On KEV
0
New 30D
Products
MF7.8
Mx900 Firmware
Verifone
4 CVEs0 on KEV0 new
VO7.8
Verix OS
Verifone
3 CVEs0 on KEV0 new
CP7.5
Commerce Paybox
Verifone
1 CVEs0 on KEV0 new
PF6.8
P200 Firmware
Verifone
1 CVEs0 on KEV0 new
PF6.8
P400 Firmware
Verifone
1 CVEs0 on KEV0 new
VW–
Vericentre Web Console
Verifone
1 CVEs0 on KEV0 new
VM8.1
Verix Multi-app Conductor
Verifone
1 CVEs0 on KEV0 new
V86.8
VX 805 Firmware
Verifone
1 CVEs0 on KEV0 new
V86.8
VX 820 Firmware
Verifone
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-0750 | CP Commerce Paybox Verifone | 7.5 | Jan 28 | Payment bypass in Commerce Paybox |
| CVE-2019-14719 | MF Mx900 Firmware Verifone | 7.8 | Oct 23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager |
| CVE-2019-14718 | MF Mx900 Firmware Verifone | 6.7 | Oct 23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation |
| CVE-2019-14717 | VO Verix OS Verifone | 7.8 | Oct 23 | Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call |
| CVE-2019-14716 | VO Verix OS Verifone | 6.6 | Oct 23 | Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out) |
| CVE-2019-14715 | PF P400 Firmware Verifone | 6.8 | Oct 23 | Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation |
| CVE-2019-14713 | MF Mx900 Firmware Verifone | 5.5 | Oct 23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages |
| CVE-2019-14712 | VO Verix OS Verifone | 7.8 | Oct 23 | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation |
| CVE-2019-14711 | MF Mx900 Firmware Verifone | 7.0 | Oct 23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass |
| CVE-2019-10060 | VM Verix Multi-app Conductor Verifone | 8.1 | Mar 26 | The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long… |
| CVE-2012-4951 | VW Vericentre Web Console Verifone | – | Nov 15 | Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands… |
