Skip to content
Open-reception vulnerabilities
Newest
-
open-reception appointment-booking-software
OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant
CVE-2026-75525
5.3 Medium
-
open-reception appointment-booking-software
OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent
CVE-2026-75524
5.4 Medium
-
open-reception appointment-booking-software
OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
CVE-2026-65825
7.5 High
-
open-reception appointment-booking-software
OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie
CVE-2026-65824
7.4 High
-
open-reception appointment-booking-software
OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`
CVE-2026-58202
8.3 High
-
open-reception appointment-booking-software
OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
CVE-2026-54460
9.8 Critical
-
open-reception appointment-booking-software
OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory
CVE-2026-48088
9.4 Critical
-
open-reception appointment-booking-software
OpenReception: WebAuthn passkey injection allows account takeover
CVE-2026-48087
9.8 Critical
-
open-reception appointment-booking-software
OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN
CVE-2026-48086
9.9 Critical
-
open-reception appointment-booking-software
OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap
CVE-2026-48085
9.8 Critical
-
open-reception appointment-booking-software
OpenReception doesn't rate limit passphrase login attempts
CVE-2026-48084
7.4 High
-
open-reception appointment-booking-software
OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits
CVE-2026-48083
6.5 Medium
-
open-reception appointment-booking-software
OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification
CVE-2026-48082
3.7 Low
-
open-reception appointment-booking-software
OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer
CVE-2026-48081
8.1 High
-
open-reception appointment-booking-software
OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry
CVE-2026-48079
7.4 High
-
open-reception appointment-booking-software
OpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers
CVE-2026-48078
5.3 Medium
-
open-reception appointment-booking-software
OpenReception: GET appointment by ID returns full appointment record without authorization
CVE-2026-48077
5.3 Medium
-
open-reception appointment-booking-software
OpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channels
CVE-2026-48076
6.5 Medium
-
open-reception appointment-booking-software
OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections
CVE-2026-48075
6.5 Medium
-
open-reception appointment-booking-software
OpenReception: Staff deletion removes pending invites cross-tenant by email match
CVE-2026-48074
2.7 Low
-
open-reception appointment-booking-software
OpenReception's client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockout
CVE-2026-48071
5.8 Medium
-
open-reception appointment-booking-software
OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment
CVE-2026-48080
8.0 High