CVE-2026-46382
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be fetched without checks. Version 1.12.2 contains a fix; no known workarounds are available.
Risk Assessment
The vulnerability could allow an attacker to access internal network resources or local files, potentially leading to data leakage or further attacks. It requires user interaction or access to the application.
Recommendation
It is recommended to update MRBS to version 1.12.2 or later immediately. Also restrict access to the application and monitor logs.
Original NVD description (English source)
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.