CVE-2026-15657

foreUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials PUBLISHED

Description (CNA)

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.

Affected (CNA)

Vendor / product	Versions
foreUP / foreUP	affected API

CWE

No CWE identifiers supplied.

References

https://kb.cert.org/vuls/id/790363

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.