CVE-2026-23844 - Whisper Money has IDOR Vulnerability on sync/balances endpoint

CVE ID : CVE-2026-23844 Published : Jan. 19, 2026, 9:15 p.m. | 1 hour, 10 minutes ago Description : Whisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulnerability. A user can update/create account balances in other users' bank accounts. Version 0.1.5 fixes the issue. Severity: 4.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...