Knit Pay – Instamojo, Razorpay, Cashfree, Stripe, Easebuzz, UPI QR, CCAvenue, GoUrl, CVE-2026-49070

CVE, Research URL: CVE-2026-49070
Home page URL: Security reports for Knit Pay – Instamojo, Razorpay, Cashfree, Stripe, Easebuzz, UPI QR, CCAvenue, GoUrl
Application: Knit Pay – Instamojo, Razorpay, Cashfree, Stripe, Easebuzz, UPI QR, CCAvenue, GoUrl
Published on: Jun 16, 2026
Research Description: Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions.
Affected versions: max 9.4.0.1.
Status: vulnerable

Knit Pay &#8211; Instamojo, Razorpay, Cashfree, Stripe, Easebuzz, UPI QR, CCAvenue, GoUrl, CVE-2026-49070