CVE-2026-46688
Meeting Room Booking System has an unauthenticated open redirect
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.
| CWE | CWE-601 |
| Vendor | meeting-room-booking-system |
| Product | mrbs-code |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for meeting-room-booking-system mrbs-code
Be the first to know when new unknown vulnerabilities affecting meeting-room-booking-system mrbs-code are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
meeting-room-booking-system / mrbs-code
< 1.12.2