CVE-2026-6492: Information Disclosure in arnobt78 Hotel Booking Management System
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3. To fix this issue, it is recommended to deploy a patch.
AI Analysis
Technical Summary
This vulnerability in arnobt78 Hotel Booking Management System involves an unknown function within the /api/health/detailed health check endpoint. Remote attackers can exploit this flaw without authentication or user interaction to cause information disclosure. The product follows a rolling release approach, so no discrete affected version numbers are available. A patch commit has been identified to remediate the issue. No official remediation level or vendor advisory details are provided.
Potential Impact
Successful exploitation results in information disclosure, potentially exposing sensitive system or application data. The vulnerability is remotely exploitable without privileges or user interaction, increasing its risk. However, the impact is limited to information disclosure only, with no indication of further compromise or system control.
Mitigation Recommendations
A patch identified by commit d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3 is recommended to remediate this vulnerability. Since the product uses a rolling release model, deploying the latest updates that include this patch is advised. Patch status is not explicitly confirmed beyond this recommendation; users should verify with the vendor or project repository for the latest remediation guidance.
CVE-2026-6492: Information Disclosure in arnobt78 Hotel Booking Management System
Description
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3. To fix this issue, it is recommended to deploy a patch.
CVSS v4.0
Score 6.9medium
Affected software
arnobt78
Hotel Booking Management System
cpe:2.3:a:arnobt78:hotel_booking_management_system:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in arnobt78 Hotel Booking Management System involves an unknown function within the /api/health/detailed health check endpoint. Remote attackers can exploit this flaw without authentication or user interaction to cause information disclosure. The product follows a rolling release approach, so no discrete affected version numbers are available. A patch commit has been identified to remediate the issue. No official remediation level or vendor advisory details are provided.
Potential Impact
Successful exploitation results in information disclosure, potentially exposing sensitive system or application data. The vulnerability is remotely exploitable without privileges or user interaction, increasing its risk. However, the impact is limited to information disclosure only, with no indication of further compromise or system control.
Mitigation Recommendations
A patch identified by commit d47ae0e27c700b64dc417f7f01b84a6b1b0b6bd3 is recommended to remediate this vulnerability. Since the product uses a rolling release model, deploying the latest updates that include this patch is advised. Patch status is not explicitly confirmed beyond this recommendation; users should verify with the vendor or project repository for the latest remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-04-17T07:24:13.202Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69e2424ebdfbbecc592bf52a
Added to database: 04/17/2026, 14:23:10 UTC
Last enriched: 08/02/2026, 19:34:08 UTC
Last updated: 09/13/2026, 22:01:36 UTC
Views: 141
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.