CVE-2026-46382
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be fetched without checks. Version 1.12.2 contains a fix; no known workarounds are available.
Risk Assessment
The vulnerability could allow an attacker to access internal network resources or local files, potentially leading to data leakage or further attacks. It requires user interaction or access to the application.
Recommendation
It is recommended to update MRBS to version 1.12.2 or later immediately. Also restrict access to the application and monitor logs.
Other vulnerabilities in Meeting Room Booking System
Original NVD description (English source)
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS