AP
Product
appointment-booking-software
22
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Severity mix
Critical 5High 7Medium 8Low 2
Watch
Add appointment-booking-software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48086 | 9.9 | Aug 6 | OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN Affected: < 1.0.2 |
| CVE-2026-54460 | 9.8 | Sep 17 | OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover Affected: < 1.1.1 |
| CVE-2026-48087 | 9.8 | Aug 6 | OpenReception: WebAuthn passkey injection allows account takeover Affected: < 1.0.2 |
| CVE-2026-48085 | 9.8 | Aug 6 | OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap Affected: < 1.0.1 |
| CVE-2026-48088 | 9.4 | Aug 6 | OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory Affected: < 1.0.4 |
Showing 5