CVE-2026-95527

Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions.

Published Sep 23, 2026
CVSS 6.5 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Conekta Group Conekta Payment Gateway

CVE-2026-95527 at the National Vulnerability Database