CVE-2026-66473

Xendit Payment versions up to 7.1.0 are susceptible to unauthenticated broken access control vulnerabilities, allowing attackers to exploit the system without authentication. This can lead to unauthorized access to sensitive payment functionalities, potentially resulting in financial loss and data breaches. Organizations using affected versions should prioritize immediate remediation to safeguard their payment processing systems.