CVE-2026-102649 | padok-team Burrito up to 0.12.x Webhook /api/webhook data authenticity

October 26, 2026 Yanac

A vulnerability has been found in padok-team Burrito up to 0.12.x and classified as critical. This affects an unknown function of the file /api/webhook of the component Webhook Handler. Performing a manipulation results in insufficient verification of data authenticity.

This vulnerability is known as CVE-2026-102649. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More