CVE-2026-65468

MediumCVSS 5.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The JetBooking plugin version 4.1.2 and earlier contains a broken access control vulnerability that can be exploited without authentication. An attacker can gain unauthorized access to functions or data.

Risk Assessment

The risk involves potential unauthorized access to sensitive data or administrative functions, which could lead to a breach of confidentiality and system integrity.

Recommendation

It is recommended to immediately update the JetBooking plugin to the latest available version that fixes this vulnerability.

Other vulnerabilities in JetBooking

CVE-2026-65466Medium
The JetBooking plugin version 4.1.2 and earlier is vulnerable to SSRF attacks from a custom role. A user with a custom role can send requests to internal network resources.

Original NVD description (English source)

Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS