CVE-2026-62101

CriticalCVSS 9.8

Published: 17/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Summary

Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions. The description does not provide technical details of the exploitation mechanism.

Risk Assessment

May allow an unauthenticated attacker to bypass authentication mechanisms and gain unauthorized access to the booking system. Urgent verification and update are recommended.

Recommendation

Upgrade EduAdmin Booking to a version later than 5.4.2. Check with the vendor for a fix and verify your authentication configuration.

Other vulnerabilities in EduAdmin Booking

CVE-2026-96809Critical
The EduAdmin Booking plugin (eduadmin-booking) by MultiNet Interactive AB contains an SQL Injection vulnerability (improper neutralization of special elements in SQL commands). It allows an attacker to perform blind SQL injection. This issue affects versions from n/a before 6.0.0.

Original NVD description (English source)

Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS