CVE-2026-119422 | Juspay Hyperswitch up to 1.127.x Worldpayxml Connector verify_webhook_source improper authentication

October 30, 2026 Yanac

A vulnerability, which was classified as critical, was found in Juspay Hyperswitch up to 1.127.x. Affected is the function verify_webhook_source of the component Worldpayxml Connector. Such manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-119422. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More