CVE-2026-15657

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body...

CVE-2026-15658

A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking that the caller owns the data associated with that record...

CVE-2026-15657

The CVE-2026-15657 entry concerns the foreUP customer REST API. It discloses that any authenticated user can read cleartext payment-processor merchant credentials in the API response body. The connected documents contain only this description; no explicit product version, component name, root-cau...

EUVD-2026-51163

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body...

EUVD-2026-51159

A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking that the caller owns the data associated with that record...

CVE-2026-15658

CVE-2026-15658 concerns the foreUP customer REST API. The vulnerability allows any authenticated, low-privilege customer to access an endpoint that returns other users’ records without verifying data ownership. Impact is unauthorized disclosure of user data. The provided documents do not specify ...