OP
Vendor
open-reception
22
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75525 New | AP appointment-booking-software open-reception | 5.3 | Oct 23 | OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant |
| CVE-2026-75524 New | AP appointment-booking-software open-reception | 5.4 | Oct 23 | OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent |
| CVE-2026-65825 New | AP appointment-booking-software open-reception | 7.5 | Oct 23 | OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants |
| CVE-2026-65824 New | AP appointment-booking-software open-reception | 7.4 | Oct 23 | OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie |
| CVE-2026-58202 New | AP appointment-booking-software open-reception | 8.3 | Oct 23 | OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation` |
| CVE-2026-54460 | AP appointment-booking-software open-reception | 9.8 | Sep 17 | OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover |
| CVE-2026-48088 | AP appointment-booking-software open-reception | 9.4 | Aug 6 | OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory |
| CVE-2026-48087 | AP appointment-booking-software open-reception | 9.8 | Aug 6 | OpenReception: WebAuthn passkey injection allows account takeover |
| CVE-2026-48086 | AP appointment-booking-software open-reception | 9.9 | Aug 6 | OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN |
| CVE-2026-48085 | AP appointment-booking-software open-reception | 9.8 | Aug 6 | OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap |
| CVE-2026-48084 | AP appointment-booking-software open-reception | 7.4 | Aug 6 | OpenReception doesn't rate limit passphrase login attempts |
| CVE-2026-48083 | AP appointment-booking-software open-reception | 6.5 | Aug 6 | OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits |
| CVE-2026-48082 | AP appointment-booking-software open-reception | 3.7 | Aug 6 | OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification |
| CVE-2026-48081 | AP appointment-booking-software open-reception | 8.1 | Aug 6 | OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer |
| CVE-2026-48079 | AP appointment-booking-software open-reception | 7.4 | Aug 6 | OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry |
| CVE-2026-48078 | AP appointment-booking-software open-reception | 5.3 | Aug 6 | OpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers |
| CVE-2026-48077 | AP appointment-booking-software open-reception | 5.3 | Aug 6 | OpenReception: GET appointment by ID returns full appointment record without authorization |
| CVE-2026-48076 | AP appointment-booking-software open-reception | 6.5 | Aug 6 | OpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channels |
| CVE-2026-48075 | AP appointment-booking-software open-reception | 6.5 | Aug 6 | OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections |
| CVE-2026-48074 | AP appointment-booking-software open-reception | 2.7 | Aug 6 | OpenReception: Staff deletion removes pending invites cross-tenant by email match |
| CVE-2026-48071 | AP appointment-booking-software open-reception | 5.8 | Aug 6 | OpenReception's client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockout |
| CVE-2026-48080 | AP appointment-booking-software open-reception | 8.0 | Aug 6 | OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment |