CVE-2026-42666

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

The salon booking system versions up to 10.30.25 have an unauthenticated broken access control vulnerability that may allow unauthorized users to access resources.

Risk Assessment

The organization may be exposed to unauthorized access to data and system functions, potentially leading to loss of confidentiality and integrity of information.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and implement additional access control mechanisms.

Original NVD description (English source)

Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.