CVE-2026-111719 - Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query
CVE ID :CVE-2026-111719 Published : Oct. 16, 2026, 6:17 p.m. | 1 hour, 16 minutes ago Description :Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a...