CVE-2026-123870

The otterdog webapp is vulnerable to unauthenticated remote code execution due to the unsafe use of Python's eval() function. The application evaluates a format-string constructed from the JSON body of incoming GitHub webhooks. If the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (d...

New API < v0.12.10 - Stripe Webhook Bypass

New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...

Budibase - Authentication Bypass

Budibase = 3.31.4 contains an authentication bypass caused by unanchored regex in authorized middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL. id:...

BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass

BlueSnap Payment Gateway for WooCommerce = 3.4.0 validates its unauthenticated IPN webhook using WooCommerce's client-IP geolocation, which trusts spoofed forwarding headers instead of requiring a webhook signature. Version 3.4.1 replaces the IP check with HMAC-SHA256 security headers. This...

MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass

MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint. id: CVE-2026-64849 info:...

Dozzle - Server Side Request Forgery

Dozzle prior to 10.5.2 contains a server-side request forgery caused by unauthenticated access to POST /api/notifications/test-webhook forwarding attacker-controlled URLs, letting remote attackers send arbitrary HTTP POST requests and receive response data, exploit requires no authentication. id:...

CVE-2026-124442

AzuraCast versions before 0.24.0 are vulnerable to a Server-Side Request Forgery (SSRF) . Users with station WebHooks permission can bypass the UserUrlFilter SSRF guard by using HTTP redirects. By configuring webhooks for platforms like Mastodon, Telegram, GroupMe, or RadioReg to point to a redir...

CVE-2026-104639

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret administrators to perform SQL injection attacks...

CVE-2026-104639

The Razorpay for WooCommerce WordPress plugin (versions before 4.8.9 ) is vulnerable to an SQL injection attack. The root cause is the failure to properly sanitize and escape values derived from incoming webhook requests before they are processed in a SQL query. This vulnerability allows administ...

CVE-2026-104639 Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret administrators to perform SQL injection attacks...

EUVD-2026-119473

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret administrators to perform SQL injection attacks...

CVE-2026-123522

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123524

Vikunja versions 0.23.0 before 2.7.1 are vulnerable to an information disclosure flaw within the webhook system. The root cause is that webhook payloads are constructed using the permissions of the triggering user rather than the user authorized to view the content. Consequently, project collabor...

EUVD-2026-119407

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123522

Vikunja versions prior to 2.7.1 are vulnerable to an authorization bypass vulnerability. An authenticated attacker can disclose any task's content by injecting a crafted task object into a no-op Kanban bucket move operation. By setting the task.id to a victim's task and the task.project_id to the...

CVE-2026-123522 Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123506

The software Vikunja (versions 2.2.0 before 2.7.1) contains an authorization bypass vulnerability involving project webhook endpoints. The root cause allows users with tokens scoped only to projects_webhooks to manage an owner's user-level webhooks by supplying a user_id in request bodies. This e...

CVE-2026-123504

Vikunja versions 0.22.0 before 2.7.1 are vulnerable to an information disclosure vulnerability. This flaw allows project members with read-only privileges to view complete webhook target URLs by listing project webhooks. Attackers can exploit this to extract incoming-webhook tokens or API keys em...

CVE-2026-123504 Vikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only Members

Vikunja from 0.22.0 before 2.7.1 contains an information disclosure vulnerability that allows read-only project members to view full webhook target URLs by listing project webhooks. Attackers can extract incoming-webhook tokens or API keys embedded in targeturl values to post to receiving channel...

EUVD-2026-119389

Vikunja from 0.22.0 before 2.7.1 contains an information disclosure vulnerability that allows read-only project members to view full webhook target URLs by listing project webhooks. Attackers can extract incoming-webhook tokens or API keys embedded in targeturl values to post to receiving channel...