CVE-2026-46382CWE-918ssrf

CVE-2026-46382

published August 13, 2026

CVSS
8.7
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-13T04:17Z
References (2)
https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.12.2 · [email protected]https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-gh77-mpcm-f8r3 · [email protected]
EPSS history
Timeline
  • 12 AUG 23:39Z
    Meeting Room Booking System has server-side request forgery in import functionality
    cvelistv5