Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-15657

foreUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials

Description

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

foreUP foreUP

  • APIaffected

References