VULNERABILITY INTELLIGENCE

CVE-2026-71626

CVSS score7.5 HIGH

EPSS probability0.53%

CISA KEVNot currently listed

Published2026-09-04

Last modified2026-09-09

Description

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components