CVE-2026-105070

Summary

The flaw allows unauthenticated users to escalate privileges in the Salon booking system up to version 10.31.7, enabling unauthorized access and control over the system.

Exploitability

Exploitation is relatively straightforward requiring only an unauthenticated user to trigger the vulnerability, making it a significant risk.

Blast radius

If exploited, the impact could be severe, potentially leading to full system compromise and data theft.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 10.31.8 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.