Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-46688 MRBS Unauthenticated Redirect Vulnerability Prior to 1.12.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46688
Post summary
The text announces CVE-2026-46688, an unauthenticated redirect vulnerability in MRBS versions before 1.12.2, and provides a link to a vulnerability database.