Get real-time updates on Telegram
Verified
CVE-2026-84166: Hotel Booking 0 through 3.8
Affected technology
Hotel Booking · 0 through 3.8
Vendor not specified by the source
Description’s affected range: through 3.8 does not implement CSRF protection on its administrative booking order management
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-12 09:37:50.126941+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-12 09:35:23.534032+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-84166.html