CVE Catalog

CVE-2026-42667

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

In Bookly versions up to 27.4, there is a vulnerability allowing unauthorized access to sensitive data.

Risk Assessment

Organizations may be exposed to the disclosure of confidential information, potentially leading to privacy breaches and loss of customer trust.

Recommendation

It is recommended to update to the latest version of Bookly to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS