CVE-2026-49066

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

The Conekta Payment Gateway versions up to 6.0.0 have a vulnerability that allows unauthenticated access to sensitive data.

Organizations may be exposed to the leakage of personal or financial data, which can lead to serious legal and reputational consequences.

It is recommended to update the Conekta Payment Gateway to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions.