CVE-2026-48082 OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at /api/tenants/id/appointments/bootstrap-challenge issues a SHA-256 proof-of-work with difficulty=4 hex zeros, equivalent to 16 bit...

CVE-2026-48082 OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at /api/tenants/id/appointments/bootstrap-challenge issues a SHA-256 proof-of-work with difficulty=4 hex zeros, equivalent to 16 bit...

CVE-2026-48082

OpenReception’s OpenReception appointment-booking software before v1.0.6 uses a bootstrap-challenge PoW endpoint (/api/tenants/{id}/appointments/bootstrap-challenge) that requires SHA-256 with difficulty=4 hex zeros (≈16 bits). Modern hardware solves this quickly, undermining rate-limiting for un...

CVE-2026-48076 OpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channels

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. The new-client booking flow in versions 1.0.1 and prior consists of three calls: bootstrap-challenge returns a 16-bit PoW challenge with difficulty=4 leading hex zeroes, bootstrap-verify...

CVE-2026-71436

creationtimestamp| type| source ---|---|--- 2026-08-06 20:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2v8p-3f2j-5mp7...

CVE-2026-71326

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:20+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf...

CVE-2026-71327

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:18+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-fgjj-px3w-67xx...

CVE-2026-71325

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:13+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq...

CVE-2026-65600

creationtimestamp| type| source ---|---|--- 2026-08-06 18:31:30+00:00| seen| https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b 2026-08-06 18:35:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cxjq-mrr5-89rv...

CVE-2026-64561

creationtimestamp| type| source ---|---|--- 2026-08-06 17:32:06+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3msgl44wfgl2w 2026-08-06 17:34:01+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3msgl7locz625 2026-08-06 17:41:23+00:00| seen|...

CVE-2026-71324

creationtimestamp| type| source ---|---|--- 2026-08-06 16:31:29+00:00| seen| https://gist.github.com/alon710/44f5ca1944b401eb63cfb2fdd265ca45 2026-08-06 16:35:02+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-3ccp-42pg-hgv6...

CVE-2026-63078

creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:05+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 00:40:12+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 01:00:04+00:00|...

CVE-2026-71309

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:42+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-45pq-889g-fcgh...

CVE-2026-71310

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:36+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-xhf4-832v-7xcr...

CVE-2026-71311

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:25+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-8c48-q9wj-3w37 2026-08-06 12:31:36+00:00| seen| https://gist.github.com/alon710/d60715eb4915a2fe25854150e00d6548...

CVE-2026-71313

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:14+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567 2026-08-06 06:31:10+00:00| seen| https://gist.github.com/alon710/49b7a81d033518d9857d9b26baae89fd...

CVE-2026-65601

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00...

CVE-2026-65602

creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-05 22:35:09+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv 2026-08-06 00:00:18+00:00...

CVE-2026-71312

creationtimestamp| type| source ---|---|--- 2026-08-05 22:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejoydgl52z 2026-08-05 22:35:21+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-2m8m-jhrm-w6j2 2026-08-06...

CVE-2026-71211

creationtimestamp| type| source ---|---|--- 2026-08-05 22:00:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96814 2026-08-06 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96814 2026-08-07 10:17:15+00:00| seen|...