CVE-2026-119422 - Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector
CVE ID :CVE-2026-119422 Published : Oct. 30, 2026, 12:16 p.m. | 1 hour, 43 minutes ago Description :Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's...