CVE-2026-40726

HighCVSS 8.2

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

Versions of Stripe up to 1.3.14 have an issue with unauthenticated access in the user registration process.

Organizations may be exposed to unauthorized access to user accounts, potentially leading to data leaks or unauthorized actions.

It is recommended to upgrade to the latest version of Stripe to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.