CVE-2026-84918

The Drupal Monobank payment API module (versions 0.0.0 to 1.0.3 ) is vulnerable to an Improper Verification of Cryptographic Signature (CWE-347) issue. The module fails to verify the Monobank webhook signature before processing payment status callbacks, which could allow an attacker to perform Si...