CVE-2026-28188

Hydra Booking versions up to 1.2.2 are vulnerable to unauthenticated broken access control, allowing attackers to exploit the system without authentication. This vulnerability could lead to unauthorized access to sensitive functionalities or data, posing a significant risk to the integrity and confidentiality of the application. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.