CVE-2026-31843 | goodoneuz pay-uz up to 2.2.24 Endpoint update Route::any access control

April 16, 2026 Yanac

A vulnerability was found in goodoneuz pay-uz up to 2.2.24 and classified as critical. The impacted element is the function Route::any of the file /payment/api/editable/update of the component Endpoint. Such manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-31843. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More