CVE-2026-96348

Bookly versions up to 28.2 are susceptible to unauthenticated broken access control vulnerabilities, allowing attackers to gain unauthorized access to sensitive functionalities or data. This high-severity flaw could lead to significant data exposure or manipulation, making it critical for organizations using affected versions to prioritize immediate remediation. Users and administrators of Bookly should assess their systems for this vulnerability and apply necessary updates or mitigations promptly.