CVE-2026-42752

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Versions of Stripe Payments up to 2.0.98 contain a vulnerability that allows for unauthenticated bypass.

Organizations may be exposed to unauthorized transactions and loss of customer data.

It is recommended to update Stripe Payments to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.