Live › vulnerability › CVE-2026-104674
Booktics, a booking plugin from Arraytics, has a missing authorization check that allows access control settings to be exploited. Per the description, versions through 1.0.31 are affected, and an attacker may reach functions they should not be allowed to use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites or systems running Booktics up to and including 1.0.31 are affected. The sources do not say which roles or settings must be enabled to reach the flaw, so unknown.
No product ranges from the sources yet.
1.0.31 are affected; move to a later releaseEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.
This page as .md · .json · in your agent: get_signal("CVE-2026-104674")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.