PT-2026-68736

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.6 Description An issue exists in the appointment booking platform where a TENANT ADMIN can inadvertently delete pending invites belonging to other tenants. When deleting a staff user, the...

CVE-2026-48074: Incorrect Authorization

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANTADMIN deletes an existing staff user, the underlying StaffService.deleteStaffMember runs an additional invite cleanup that deletes from the central...