PT-2026-58070 · Unknown · Easyappointments

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-55651

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Easy!Appointments versions prior to 1.6.0

Description An excessive data exposure issue in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. An attacker can use these hashes to modify or delete appointments of other providers, leading to an appointments takeover.

Recommendations Update to version 1.6.0.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-55651

GHSA-4VMM-5QVC-W5P7

Affected Products

Easyappointments

References · 4

• 🔥 https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-4vmm-5qvc-w5p7 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55651.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-55651 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-55651 · Security Note