flexprice CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH flexprice CVE published 2026-10-14

CVE-2026-110765

CVE-2026-110765 FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass allows unauthenticated attackers to replay forged payment notifications by omitting the intuit-signature header, potentially leading to incorrect marking of invoices as paid or overpaid and manipulation of payment amounts. Defenders responsible for FlexPrice configurations and payment notification systems should asse [truncated]