{"vulnerability": "cve-2026-48088", "sightings": [{"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"}, {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"}, {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"}, {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"}]}