CVE-2026-26063
CediPay Affected by Improper Input Validation in Payment Processing
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay prior to version 1.2.3 allows attackers to bypass input validation in the transaction API. The issue has been fixed in version 1.2.3. If upgrading is not immediately possible, restrict API access to trusted networks or IP ranges; enforce strict input validation at the application layer; and/or monitor transaction logs for anomalies or suspicious activity. These mitigations reduce exposure but do not fully eliminate the vulnerability.
| CWE | CWE-20 |
| Vendor | xpertforextradeinc |
| Product | cedipay |
| Published | Feb 19, 2026 |
| Last Updated | Feb 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for xpertforextradeinc cedipay
Be the first to know when new unknown vulnerabilities affecting xpertforextradeinc cedipay are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
xpertforextradeinc / CediPay
< 1.2.3