CVE-2026-66453
Received Received - Intake

BaseFortify

Vulnerability report for CVE-2026-66453, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Patchstack

Description

Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack salon_booking_system to 10.30.26 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated broken authentication vulnerability in the Salon booking system versions 10.30.26 and below. It allows attackers to bypass authentication mechanisms without any credentials, potentially gaining unauthorized access to sensitive functions and data.

Impact Analysis

An attacker could exploit this to gain full control over the system, access or modify sensitive data, perform unauthorized actions, or disrupt services. The high CVSS score of 9.8 indicates severe impact with low attack complexity and no privileges required.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or health data, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance may result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Immediately update the Salon booking system to the latest version beyond 10.30.26 to address the unauthenticated broken authentication vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66453. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart