CVE-2026-75524

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 2.2.2

Description An issue exists where an attacker can overbook an agent by placing multiple appointments into a single time slot intended to be exclusive. This occurs because the number of overlapping appointments corresponds to the number of concurrent requests, and a single booking token is sufficient as it is only consumed after the insert operation. This leads to a breach in the integrity of the booking calendar and denies availability to other clients.

Recommendations Update to version 2.2.2.