Advisories · Technology

Online Scheduling and Appointment Booking System.

Every CVE that names Online Scheduling and Appointment Booking System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86841 CVE record

CVSS 4.7 Medium

Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options
- Online Scheduling and Appointment Booking System
- Insecure deserialization
Not analysed yet 27 Sept 2026
CVE-2026-86839 CVE record

CVSS 3.8 Low

Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR
- Online Scheduling and Appointment Booking System
- Broken access control
Not analysed yet 27 Sept 2026
CVE-2026-91847 CVE record

CVSS 4.8 Medium

Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR
- Online Scheduling and Appointment Booking System
- Broken access control
Not analysed yet 19 Sept 2026
CVE-2026-13395 CVE record

CVSS 8.6 High

Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
- Online Scheduling and Appointment Booking System
- SQL injection
Not analysed yet 30 Jul 2026