CVE-2026-61954

An unauthenticated broken access control vulnerability exists in PayU India versions up to 3.8.9, allowing attackers to bypass authentication mechanisms and gain unauthorized access to sensitive resources. This flaw poses a significant risk of data exposure and manipulation, making it critical for organizations using affected versions to prioritize immediate remediation. Security teams and system administrators should assess their environments for this vulnerability to mitigate potential exploitation.