PHP-based Meeting Room Booking System Vulnerability in MRBS
CVE-2026-46688

6.9MEDIUM

Key Information:

Vendor

Meeting-room-booking-system

Status
Mrbs-code
Vendor
CVE Published:
12 August 2026

What is CVE-2026-46688?

The Meeting Room Booking System (MRBS), a widely-used PHP-based application for booking meeting spaces, is exposed to a redirect vulnerability. This allows attackers to create maliciously crafted URLs that, when clicked by unsuspecting users, redirect them to arbitrary locations, potentially leading them to a spoofed login page. Users of MRBS should ensure they are running version 1.12.2 or later to mitigate this risk, as earlier versions are susceptible to this security flaw. Currently, no workarounds exist to address this issue, making upgrading essential for maintaining system integrity.

Affected Version(s)

mrbs-code < 1.12.2

References

https://github.com/meeting-room-booking-system/mrbs-code/...
x_refsource_CONFIRM
https://github.com/meeting-room-booking-system/mrbs-code/...
x_refsource_MISC

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.