CVE-2026-15657

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - cret@cert.org

Published

2026-07-30

Last modified

2026-10-23

Weaknesses

CWE-522

Affected products

• Foreup (Foreup)

References

• https://kb.cert.org/vuls/id/790363