SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-84768

CRITICAL · CVSS 9.3 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

VikAppointments Services Booking Calendar versions up to 1.2.20 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries and potentially access sensitive data. This critical vulnerability, rated 9.3 on the CVSS scale, poses significant risks to any organization using affected versions of the software. Organizations utilizing VikAppointments should prioritize immediate remediation to mitigate potential data breaches and system compromise.

CVE
CVE-2026-84768
Severity
CRITICAL
CVSS
9.3
EPSS
0.24%

Original NVD Description

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.