Information disclosure in Arnobt78 Hotel Booking Management System
CVE-2026-6492
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. P…
Vulnerability class: Information Disclosure
EPSS: 0.000 (2.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R.
Affected products
- Arnobt78 Hotel Booking Management System — versions f8922d0e0f6ac1cc761974c7616f44c2bbc04bea
Weakness classification (CWE)
References
- VDB-358036 | arnobt78 Hotel Booking Management System Health Check Endpoint detailed information disclosure (vdb-entry)
- VDB-358036 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
- Submit #787242 | arnobt78 Hotel Booking Management System 1 Information Disclosure (third-party-advisory)
- github.com/sudo-secure/security-research/blob/main/Hotel-Booking-Management-Sys… (exploit)
Frequently asked questions
- What is CVE-2026-6492?
- CVE-2026-6492 is a medium-severity vulnerability in Arnobt78 Hotel Booking Management System, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-04-17.
- How severe is CVE-2026-6492?
- Medium severity. CVSS v3 base score is 5.3 out of 10.