CVE-2026-28159

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Broken Access Control vulnerability in Service Finder Booking up to version 6.2 allows a subscriber to gain unauthorized access to administrative functions.

Risk Assessment

Subscribers may access sensitive functions, potentially leading to data integrity issues or unauthorized changes.

Recommendation

Update Service Finder Booking to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.