CVE-2026-71626 PUBLISHED

Assigner: mitre
Reserved: 07.08.2026 Published: 04.09.2026 Updated: 04.09.2026

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://colorful-quill-4fe.notion.site/CVE-2026-71626-API-Webhook-SSRF-via-Internal-and-Loopback-Targets-382e5670300c80b6b4dac4c8216b5ff8?source=copy_link

Problem Types

n/a text