CVE-2026-108758: easyappointments 0 through 1.6.0

Affected technology

easyappointments · 0 through 1.6.0
alextselegidis

Description’s affected range: through 1.6.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Unauthenticated attackers can modify any appointment by supplying an appointment id without its hash. Vendor/CNA’s CVSS 4.0 assessment (base score 8.8/10) rates confidentiality impact as low; integrity impact as high; availability impact as none.