https://vulnerability.circl.lu/sightings/feed 2026-08-11T17:12:26.162481+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/570be4d8-5936-4124-94a1-fa3b8b9d347d/export 2026-08-11T17:12:26.182523+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"} 2026-08-08T11:58:04.480231+00:00 https://vulnerability.circl.lu/sighting/0a2d7ec6-3498-4b5f-ace2-cf7594c897c7/export 2026-08-11T17:12:26.184544+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"} 2026-08-07T00:00:40.882661+00:00 https://vulnerability.circl.lu/sighting/b240677e-21e4-4edf-a725-426e70dd0253/export 2026-08-11T17:12:26.184806+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"} 2026-08-07T00:00:39.023930+00:00 https://vulnerability.circl.lu/sighting/5ecb1996-a634-4ba8-9c0e-8798b5fb486a/export 2026-08-11T17:12:26.184976+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"} 2026-08-06T23:08:06.394124+00:00