CVE-2026-94510

Summary

A flaw in Microsoft Bookings allows an unauthorized attacker to bypass authorization through a user-controlled key, potentially elevating privileges over the network.

Exploitability

Exploitation is relatively straightforward given the attacker can control the key, but requires access to the affected service.

Blast radius

If exploited, this could lead to unauthorized access and control over Microsoft Bookings, impacting user data and service integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the named endpoint until a patch is available.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.