Project: 
Mollie for Drupal
Project machine name: 
mollie
Date: 
2026-November-11
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: 
Incorrect authorization
Affected versions: 
<2.3.2
CVE IDs: 
CVE-2026-126737
Description: 

This module enables you to accept online payments on your website using Mollie.

This module doesn't sufficiently validate an incoming webhook call, allowing payments to be applied incorrectly.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: