x402-foundation

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

x402-foundation records in CISA KEV

No x402-foundation vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76932 CVE-2026-113603 · GHSA-vxw2-vmfp-vrg3

Authorization bypass in x402 SIWX lets clients reach unpaid routes

LOW 36

The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0 through 2.28.0 contains an authorization bypass vulnerability that allows paying clients to u…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2026-10-20 No fix listed CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0