CVE-2026-81762

Received Received - Intake

Subscriber Broken Access Control in Booking and Rental Manager

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: Patchstack

Description

Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-31

Last Modified

2026-08-31

Generated

2026-09-01

AI Q&A

2026-09-01

EPSS Evaluated

N/A

NVD

CVE-2026-81762

Affected Vendors & Products

Vendor	Product	Version / Range
booking_and_rental_manager	booking_and_rental_manager	to 2.7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Subscriber Broken Access Control issue in the Booking and Rental Manager plugin versions 2.7.6 and below. It allows unauthorized users with subscriber-level access to perform actions they should not be able to, potentially leading to unauthorized data access or modifications.

Impact Analysis

An attacker with subscriber access could exploit this to gain elevated privileges, modify or delete data, or perform actions reserved for higher-privileged users. This could lead to data breaches, unauthorized transactions, or service disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Update Booking and Rental Manager to the latest version beyond 2.7.6 to address the broken access control vulnerability.

Hi! I’m here to help you understand CVE-2026-81762. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70