Is CVE-2026-4584 actively exploited?

No active exploitation of CVE-2026-4584 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-4584 be exploited remotely?

Partially. CVE-2026-4584 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-4584?

CVE-2026-4584 has a CVSS score of 3.1 (LOW).

HOME VULNERABILITIESCVE-2026-4584

LOW

CVE-2026-4584

CWE-310Published: March 23, 2026· Updated: Mar 23, 2026

3.1

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.4th

Official Description

A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack requires access to the local network. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2026-4584 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.