{"vulnerability": "CVE-2026-4808", "sightings": [{"uuid": "f5e4b14b-f65a-49be-ab54-a39d1e06cfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4808", "type": "seen", "source": "Telegram/2us3LfI3-3LhgNH-mQsCI8ayQxKx_-qgKTK1cQJ8QYqIxeY", "content": "", "creation_timestamp": "2026-04-08T09:15:53.000000Z"}, {"uuid": "555cfa9c-1d08-40bb-bb4e-50633ccfca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4808", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbxgrrcyl2i", "content": "CVE-2026-4808 gerador-de-certificados-devapps (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T19:33:07.217644Z"}, {"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"}, {"uuid": "57624628-491f-40bd-8df7-40eb4d6af0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjhxai2v", "content": "CVE-2026-48085\nOpenReception's software allows anyone to create an admin account without a password, giving them full control over the platform. This is a security risk because it means anyone who knows the software's setup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-09T04:16:04.397251Z"}, {"uuid": "170753d0-fd2b-41b8-8694-ac19101bb047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27", "content": "CVE-2026-48087\nAn attacker can steal a user's account by using their own authenticator to generate a passkey, which can then be used to log in as the victim. This vulnerability has been fixed in version 1.0.2, so users should\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-09T04:18:16.299622Z"}, {"uuid": "f645a451-7554-4174-a4be-7edcbfa06872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msmu3bbfu72t", "content": "Your Authenticator Just Became the Intruder\u2019s VIP Pass\nPANIC 68% | Lag 0.0h | CVE-2026-48087 lets an attacker abuse a victim's authenticator flow to generate a passkey that can b\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-09T05:28:38.074622Z"}, {"uuid": "ba8f4722-ffd2-4e27-a7f0-e2b731806142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msp4b5y5tb2t", "content": "\ud83d\udd34 CVE-2026-48085 - Critical (9.8)\n\nOpenReception's appointment booking software provides an end-to-end encrypted appointment booking...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48085/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T03:00:26.059082Z"}, {"uuid": "da9746ed-647d-49e6-bebb-b51841f1d22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msp4bfquvs2h", "content": "\ud83d\udd34 CVE-2026-48086 - Critical (9.9)\n\nOpenReception's appointment booking software provides an end-to-end encrypted appointment booking...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48086/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T03:00:33.948886Z"}, {"uuid": "ce38b3e1-e943-44bb-bd54-3eadcfd35262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodxmm5ga2a", "content": "CVE-2026-48089 - DevGuard has improper authorization on public assets\nCVE ID : CVE-2026-48089\n \n Published : June 19, 2026, 7:38 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a D...", "creation_timestamp": "2026-06-19T22:04:48.756501Z"}, {"uuid": "8f479f04-acb4-4b59-9bac-e5a7f713abc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5rebvv22u", "content": "CVE-2026-48085\nPrior to version 1.0.1, OpenReception's appointment booking software allowed anyone to create administrative accounts without a password. This means that an attacker could gain full control over the platform.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:06:04.648501Z"}, {"uuid": "5ed19222-d853-48f5-939f-746fb951e356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5rfo6zw22", "content": "CVE-2026-48086\nPrior to version 1.0.2 of OpenReception's appointment booking software, a user with limited admin privileges could accidentally or intentionally gain full control over all other users and tenants on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:06:05.911636Z"}, {"uuid": "f107ded4-1b29-43c8-94d1-df586c1347a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m", "content": "CVE-2026-48087\nA vulnerability in OpenReception's appointment booking software allowed an attacker to take over a user's account without their password. This happened when an attacker submitted a fake registration response\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:04.788825Z"}, {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"}, {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"}, {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"}]}