Live › vulnerability › CVE-2026-65824
Go to dashboardOpenReception's appointment booking software before 2.2.1 lets an attacker who captures a pending invite token replay it to obtain a passkey-registration credential. The attacker can then register their own passkey on the invited account and take it over, including the tenant context for staff or tenant-admin invites.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running OpenReception before 2.2.1 that send invites to staff or tenant-admin accounts are exposed, because an invite token captured in transit or from mail can be used to take over the invited account. Installations already on 2.2.1 or later are not affected by this issue.
No product ranges from the sources yet.
2.2.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential and register their own passkey on the invited account, taking control of that account. For a staff or tenant-admin invite this yields access to the tenant context tied to that account. This issue has been patched in version 2.2.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-65824")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.