Cal.com Vulnerabilities Lead to Account Takeover and Data Exposure

First seen 29 Jan 2026, 17:13 UTC • Gbhackers

•34

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cal.com, an open-source scheduling platform, experienced critical security vulnerabilities that allowed attackers to gain complete control over user accounts and access sensitive booking data. Discovered by security researchers on January 26, 2026, these flaws impacted millions of users, enabling unauthorized access to private meetings and organizational bookings.

How this analysis works

Attack Flow

Continue Reading

Cal.com Transitions to Closed Source Due to AI-Driven Security Risks Cal.com Vulnerability Allows Account Hijacking via Authentication Bypass New CVE Lite CLI Tool Audits AI Security Overrides for JavaScript Dependencies Cal.com Vulnerability Allows Bypass of Authentication with Fake TOTP Codes

Cal.com Vulnerabilities Lead to Account Takeover and Data Exposure

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading