4 matches found
Exploit for CVE-2026-23478
๐ CVE-2026-23478 โ Critical Authentication Bypass !Critical...
CVE-2026-23478
Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update. This vulnerability is fixed in...
Cal.com ๅฎๅ จๆผๆด
Cal.com is an open source scheduling software from Cal.com Open Source. A security vulnerability exists in Cal.com versions prior to 5.9.8 that stems from a logic flaw in the login credentials provider that could lead to bypassing password authentication and unauthorized access...
PT-2023-26186 ยท Cal.Com ยท Cal.Com
Name of the Vulnerable Software and Affected Versions: Cal.com affected versions not specified Description: A vulnerability in Cal.com open-source scheduling software allows active sessions associated with an account to remain active even after enabling 2FA. When 2FA is activated on a Cal.com...