CVE-2026-81762: CWE-862 Missing Authorization in magepeopleteam Booking and Rental Manager

This vulnerability is classified as CWE-862 (Missing Authorization) in the Booking and Rental Manager product by magepeopleteam. It affects all versions up to and including 2.7.6. The flaw allows an attacker with low privileges (PR:L) to perform unauthorized actions that can modify or corrupt data (integrity impact is high), without requiring user interaction. The attack vector is network-based with low attack complexity. There is no indication of confidentiality or availability impact. No known exploits are reported in the wild, and no vendor-provided patch or mitigation details are currently available.

The vulnerability allows unauthorized modification of data within the affected software, potentially leading to data integrity issues. There is no impact on confidentiality or availability. The medium severity score reflects the risk of unauthorized data alteration by a user with limited privileges over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected software to trusted users only and monitor for unusual activity related to authorization failures.