SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-73395

MEDIUM · CVSS 6.5 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated users to exploit Insecure Direct Object References (IDOR) in the Booking calendar and Appointment Booking System versions up to 3.2.36, potentially leading to unauthorized access to sensitive booking information. Organizations utilizing these affected versions should prioritize remediation to mitigate the risk of data exposure and maintain the integrity of their booking systems.

CVE
CVE-2026-73395
Severity
MEDIUM
CVSS
6.5
EPSS
0.32%

Original NVD Description

Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions.