CVE-2026-57562 | Readest up to 0.11.9 Stripe Integration route.ts sessionId authentication replay

November 5, 2026 Yanac

A vulnerability was found in Readest up to 0.11.9 and classified as critical. Impacted is an unknown function of the file apps/readest-app/src/app/api/stripe/check/route.ts of the component Stripe Integration. Executing a manipulation of the argument sessionId can lead to authentication bypass by capture-replay.

This vulnerability is registered as CVE-2026-57562. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More