CVE-2026-36726

An arbitrary file deletion vulnerability in the /api/delete-temp-license/file endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences...

CVE-2026-36726

The bookcars car rental management platform, version v8.3 , is affected by an arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint. This flaw allows unauthenticated attackers to delete arbitrary files on the system by supplying directory traversal sequences. While...