Review reviewHigh
CVE-2026-36720
the affected product
Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type.
- CVSS
- 8.1
- EPSS
- 0.25% 16.1% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.10