Skip to contentOpen-reception Appointment-booking-software vulnerabilities
- open-reception appointment-booking-softwareOpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenantCVE-2026-755255.3 Medium
- open-reception appointment-booking-softwareOpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agentCVE-2026-755245.4 Medium
- open-reception appointment-booking-softwareOpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenantsCVE-2026-658257.5 High
- open-reception appointment-booking-softwareOpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookieCVE-2026-658247.4 High
- open-reception appointment-booking-softwareOpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`CVE-2026-582028.3 High
- open-reception appointment-booking-softwareOpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeoverCVE-2026-544609.8 Critical
- open-reception appointment-booking-softwareOpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directoryCVE-2026-480889.4 Critical
- open-reception appointment-booking-softwareOpenReception: WebAuthn passkey injection allows account takeoverCVE-2026-480879.8 Critical
- open-reception appointment-booking-softwareOpenReception: Tenant admin self-promotes to GLOBAL_ADMINCVE-2026-480869.9 Critical
- open-reception appointment-booking-softwareOpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrapCVE-2026-480859.8 Critical
- open-reception appointment-booking-softwareOpenReception doesn't rate limit passphrase login attemptsCVE-2026-480847.4 High
- open-reception appointment-booking-softwareOpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limitsCVE-2026-480836.5 Medium
- open-reception appointment-booking-softwareOpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplificationCVE-2026-480823.7 Low
- open-reception appointment-booking-softwareOpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footerCVE-2026-480818.1 High
- open-reception appointment-booking-softwareOpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiryCVE-2026-480797.4 High
- open-reception appointment-booking-softwareOpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callersCVE-2026-480785.3 Medium
- open-reception appointment-booking-softwareOpenReception: GET appointment by ID returns full appointment record without authorizationCVE-2026-480775.3 Medium
- open-reception appointment-booking-softwareOpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channelsCVE-2026-480766.5 Medium
- open-reception appointment-booking-softwareOpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injectionsCVE-2026-480756.5 Medium
- open-reception appointment-booking-softwareOpenReception: Staff deletion removes pending invites cross-tenant by email matchCVE-2026-480742.7 Low
- open-reception appointment-booking-softwareOpenReception's client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockoutCVE-2026-480715.8 Medium
- open-reception appointment-booking-softwareOpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deploymentCVE-2026-480808.0 High