CVE-2026-36723

The CVE-2026-36723 entry concerns an unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3. The underlying issue is directory traversal that allows authenticated attackers to move arbitrary files from temporary storage to arbitrary filesystem locations, potenti...