Advisories · Technology

Hotel Booking.

Every CVE that names Hotel Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84166 CVE record

CVSS 4.3 Medium

Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF
- Hotel Booking
- Cross-site request forgery (CSRF)
Not analysed yet 12 Oct 2026
CVE-2026-84167 CVE record

CVSS 4.3 Medium

Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR
- Hotel Booking
- Broken access control
Not analysed yet 12 Oct 2026