All vulnerabilities
CVE-2026-84918

Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130

Drupal Monobank payment APIApplications & CMS
Open in ThreatlineRecord JSON
CVSS
3.7Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.0.3Fixed versionCVE List
Published22 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.

Text from CVE List

Affected versions 1

  • Monobank payment APIaffected: 0.0.0 before 1.0.3CVE List

References 1