CVE-2026-106014: Gateway for Vantiv on WC 0 through 1.0.1

Affected technology

Gateway for Vantiv on WC · 0 through 1.0.1
Vendor not specified by the source

Description’s affected range: through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can mark orders as paid without actually paying.

Published 19-Oct-2026 07:04 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-19 07:04:16.688945+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-106014.html