CVE-2026-52840 | alextselegidis easyappointments up to 1.5.x Caldav Caldav.php connect_to_server caldav_url server-side request forgery

July 14, 2026 Yanac

A vulnerability categorized as problematic has been discovered in alextselegidis easyappointments up to 1.5.x. Affected is the function connect_to_server of the file application/controllers/Caldav.php of the component Caldav. Such manipulation of the argument caldav_url leads to server-side request forgery.

This vulnerability is traded as CVE-2026-52840. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More