CVE-2026-119731

Munshi by Petpooja before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source validation, and independent server-side confirmation with the...

CVE-2026-119731

The Munshi (by Petpooja) platform (versions prior to 2026-06-30) is vulnerable to a payment bypass via its subscription payment webhook at POST /api/payment/order/webhook. The root cause is a lack of webhook authentication , cryptographic signature verification , source validation , and independe...

EUVD-2026-115362

Munshi by Petpooja before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source validation, and independent server-side confirmation with the...

CVE-2026-119731 Munshi Payment Bypass via Unauthenticated Webhook Endpoint

Munshi by Petpooja before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source validation, and independent server-side confirmation with the...

CVE-2026-119731: Petpooja Munshi: Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at…

Munshi by Petpooja before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source validation, and independent server-side confirmation with the...