CVE-2026-71626
An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components
- Published Sep 4, 2026
- CVSS 7.5 high
- 0.5% chance of exploitation in the next 30 days (EPSS)