VYPR

REST API

by Hiperdino

CVEs (1)

  • CVE-2026-12258CriSep 14, 2026
    risk 0.60cvss epss

    Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated…