Improper Signature Verification in Drupal Monobank Payment API
CVE-2026-84918

Currently unrated

Key Information:

Vendor

Drupal
Status
Monobank Payment Api
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84918?

The Monobank payment API for Drupal is susceptible to an improper verification of cryptographic signature vulnerability. This flaw enables an attacker to spoof signatures, potentially leading to unauthorized transactions. Affected versions range from 0.0.0 to 1.0.3. Users of the Monobank payment API should take immediate action to secure their implementations.

Affected Version(s)

Monobank payment API 0.0.0 < 1.0.3

References

https://www.drupal.org/sa-contrib-2026-130

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Helena Zajika (helena zajika)
Marcus Johansson (marcus_johansson)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.