{"id":"CVE-2026-110765","title":"FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted","summary":"FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:17:12.313","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-110765","references":[{"url":"https://github.com/flexprice/flexprice","label":"disclosure@vulncheck.com"},{"url":"https://github.com/flexprice/flexprice/blob/f27da32f84ee34bad4bf39a8d887af87fc3f30fc/internal/api/v1/webhook.go#L750","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/flexprice-quickbooks-webhook-signature-bypass","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/flexprice-through-2.1.38-quickbooks-webhook-signature-verification-bypass","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-14T19:49:57.610Z","vendor":"flexprice","product":"flexprice","affected":["flexprice <= 2.1.38"],"slug":"CVE-2026-110765","body":"## Overview\n\nFlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly add payment amounts, marking invoices paid or overpaid.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":32.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}