CVE-2026-57723 is a CSRF vulnerability in the VikBooking Hotel Booking Engine & PMS that affects all versions up to 1.8.12. The vulnerability allows an attacker to trick an authenticated user into submitting unauthorized requests, resulting in a denial of service condition. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, no confidentiality or integrity impact, but high impact on availability. There is no vendor advisory or patch information available at this time.

Successful exploitation of this CSRF vulnerability can lead to denial of service by causing the application to perform unintended actions. There is no impact on confidentiality or integrity of data. The vulnerability affects availability, potentially disrupting hotel booking and PMS operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on state-changing requests and restricting actions to trusted origins. Monitor vendor channels for official patches or updates.