Travelpayouts: All Travel Brands in One Place, CVE-2025-68042

CVE, Research URL: CVE-2025-68042
Home page URL: Security reports for Travelpayouts: All Travel Brands in One Place
Application: Travelpayouts: All Travel Brands in One Place
Published on: Feb 20, 2026
Research Description: Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpayouts: from n/a through <= 1.2.1.
Affected versions: max 1.2.1.
Status: vulnerable