News & Updates

Temporary suspension of API Developer Portal

On October 20, 2026, two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in PHP, a component utilized in our Developer Portal infrastructure. Rated as critical (CVSS 9.2), these vulnerabilities could theoretically allow an unauthenticated attacker to execute code remotely. As a preventive measure to guarantee the absolute security of our developer ecosystem,

Temporary suspension of API Developer Portal Read More »

Important API Updates: New IDV Decline Reasons and Enhanced Regex Validation

Upcoming changes and enhancements to the ConnectPay BaaS APIs. Please review these updates carefully, as they include both soft changes and breaking changes. 1. Soft Change: Expansion of the idvDeclineReason Enum Target environment dates: To provide you and your customer support teams with more precise reasons for Identity Verification (IDV) declines, we are significantly expanding

Important API Updates: New IDV Decline Reasons and Enhanced Regex Validation Read More »

Self-signed certificates are now fully supported in both non-production and production environments

What has changed Previously, only CA-issued certificates from approved certificate authorities were accepted for mTLS authentication. Effective immediately: Please note: This does not affect the Accept Payments (Merchant) API flow, which continues to use the Request Signature mechanism rather than mTLS. Also, the PSD2 API flow will require a certificate issued by a certified authority.

Self-signed certificates are now fully supported in both non-production and production environments Read More »

Scroll to Top