CVE Intelligence

Vulnerabilidades de foreUP

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de foreUP: 2 registro(s), com severidade, exploração e correções.

foreUP 2

Somente exploradas (KEV) →

CVE-2026-15658 Alta · 8.1 CWE-639 30/07/2026
foreUP customer REST API allows unauthenticated endpoint access
A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking that the caller owns the data associated with that record.
CVE-2026-15657 Média · 6.5 CWE-522 30/07/2026
foreUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials
A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.