CVE-2026-15657 | Vulnetix

CVE-2026-15657 PUBLISHED CVSS 6.5 MEDIUM

Reported by certcc · Published July 30, 2026

A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
foreUP	foreUP	API
foreUP	foreUP	API, API

Timeline

Jul 30, 2026 Coalition ESS Score
Jul 30, 2026 CVE Published
Jul 31, 2026 CVE Updated
Aug 7, 2026 EPSS Score

References

Open in Interactive Console →