What’s Vulnerable › Products

calcom cal.com vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your calcom cal.com version is affected

Latest calcom cal.com vulnerabilities

• CVE-2026-112043 — calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization (CVSS 6.3)
• CVE-2026-109143 — calcom cal.com/cal.diy Credentials delete credentials.delete privileges management (CVSS 5.4)
• CVE-2026-23478 — Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback (CVSS 9.8)
• CVE-2025-66489 — Cal.com Authentication Bypass via bad TOTP + password checks (CVSS 9.8)
• CVE-2023-37919 — Cal.com not expiring old sessions after enabling 2FA (CVSS 5.4)
• CVE-2023-1647 — Improper Access Control in calcom/cal.com (CVSS 8.8)