Advisories · Technology

Synchrony Financing.

Every CVE that names Synchrony Financing among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-100145 CVE record

CVSS 6.5 Medium

Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST Route
- Synchrony Financing
- Broken access control
Not analysed yet 21 Oct 2026