CVE-2026-71479: Integer overflow in New API, 9.1 rating ‍🔥

A recently disclosed integer overflow vulnerability in New API allows low-privileged accounts with a positive balance or an active subscription to credit themselves an arbitrarily large amount. This vulnerability is already being actively exploited in the wild!

Search at Netlas.io:
👉 Link: https://nt.ls/XoA0U
👉 Dork: http.favicon.hash_sha256:32132a307cad98d7f93b0384de87411f087bb34c148c932dcd5eea92101cbec3 OR http.unknown_headers.key:"x_new_api_version" OR http.title:"New API"

Vendor's advisory:
https://github.com/QuantumNous/new-api/security/advisories/GHSA-8r8v-xf7q-rcpr