CVE-2026-119038 | GoCardless up to 1.0 Redirect Flow confirm_resource improper authentication

October 30, 2026 Yanac

A vulnerability classified as problematic was found in GoCardless up to 1.0. The affected element is the function confirm_resource of the component Redirect Flow. The manipulation results in improper authentication.

This vulnerability is reported as CVE-2026-119038. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More