CVE-2026-129134 | meeting-room-booking-system MRBS up to 1.12.x Password Reset AuthDb::notifyUser url_base password recovery

November 13, 2026 Yanac

A vulnerability was found in meeting-room-booking-system MRBS up to 1.12.x. It has been classified as critical. Affected is the function AuthDb::notifyUser of the component Password Reset. The manipulation of the argument url_base leads to weak password recovery.

This vulnerability is listed as CVE-2026-129134. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More