CVE-2026-94273: Snap Finance 0 through 3.11.0

Affected technology

Snap Finance · 0 through 3.11.0
Vendor not specified by the source

Description’s affected range: through 3.11.0 does not verify that the payment provider's response actually confirms a completed

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can mark arbitrary orders as paid without completing payment.