Verified

CVE-2026-92427: Coinsnap Bitcoin Crowdfunding 0 through 1.2.0

Affected technology

Coinsnap Bitcoin Crowdfunding · 0 through 1.2.0
Vendor not specified by the source

Description’s affected range: through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can forge payment-confirmation notifications and record arbitrary donations as completed, with attacker-chosen amounts, donor names and messages.

Published 16-Oct-2026 07:51 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 07:51:53.906443+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-92427.html