[ Vendor · 2 CVEs ]

Bookly

CVEs affecting Bookly published in the last 30 days, plus any Bookly CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-96347 30 Sep 2026 CVSS 6.5 BooklySubscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
CVE-2026-96348 30 Sep 2026 CVSS 7.5 BooklyUnauthenticated Broken Access Control in Bookly <= 28.2 versions.