Skip to content

CVE-2026-119731

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 3, 2026
Last Seen
November 3, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A payment bypass vulnerability identified as CVE-2026-119731 was discovered in Petpooja's Munshi before June 30, 2026. The flaw allows unauthenticated remote attackers to exploit the subscription payment webhook, enabling them to falsely mark subscriptions as paid without actual payment. This vulner...

Public Exploits

Checking GitHub for proof-of-concept code…