Description
A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| foreUP | foreUP | API | — |
Medium · 6.5
CVE-2026-15657
EUVD-2026-51163GHSA-mm4c-2vv9-p2gv
foreUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials
Published Jul 30, 2026 · Updated Jul 31, 2026 · Assigned by certcc