CVE-2026-81767

Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.

Published Aug 28, 2026
CVSS 7.5 high
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

yalla ya! Simple Payment

CVE-2026-81767 at the National Vulnerability Database