CVE-2026-119731 - Munshi Payment Bypass via Unauthenticated Webhook Endpoint
CVE ID :CVE-2026-119731 Published : Nov. 2, 2026, 6:54 p.m. | 9 minutes ago Description :Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic...