Skip to content

CVE-2026-23478

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
January 15, 2026
Last Seen
January 15, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical vulnerability in Cal.com's scheduling platform allows attackers to bypass authentication and hijack user accounts. Tracked as CVE-2026-23478, this flaw affects versions from 3.1.6 to below 6.0.7, with patches available in version 6.0.7 and later. The issue is linked to a weakness in the N...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Entities