CVE-2026-119037 | Business::GoCardless up to 1.0 Webhook signature_valid improper authentication

October 30, 2026 Yanac

A vulnerability, which was classified as critical, was found in Business::GoCardless up to 1.0. This affects the function signature_valid of the component Webhook. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-119037. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More