CVE-2026-16624 | Cal cal.com up to 6.1.x Webhook teamId authorization

July 22, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Cal cal.com up to 6.1.x. This issue affects some unknown processing of the component Webhook. The manipulation of the argument teamId leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-16624. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More