Appointment Scheduling Software Vulnerability in OpenReception

CVE-2026-75524

What is CVE-2026-75524?

OpenReception's appointment booking software prior to version 2.2.2 was vulnerable to a booking calendar integrity issue, where an attacker could overbook appointments by placing multiple reservations into a single time slot. This flaw arises because the system, designed to maintain exclusivity of appointments, failed to handle concurrent requests properly. Essentially, it enabled overlapping bookings through the reuse of a single booking token, which was consumed upon the insertion of an appointment. As a result, the integrity of the calendar was compromised, ultimately denying availability to legitimate clients. This issue has been resolved in version 2.2.2.

References