CVE-2026-77466 | LycheeOrg Lychee up to 7.6.x Payment Provider Validation isAllowed input validation

October 15, 2026 Yanac

A vulnerability has been found in LycheeOrg Lychee up to 7.6.x and classified as problematic. This vulnerability affects the function OmnipayProviderType::isAllowed of the component Payment Provider Validation. The manipulation leads to improper input validation.

This vulnerability is documented as CVE-2026-77466. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More