CVE-2026-112043— calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization
Quick assessment
Affected
calcom cal.com
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Cal.com 和 cal.diy（版本 6.2.0 及更早版本）中发现一个安全弱点。受影响的是 Webhook 处理组件中文件 内的 函数。攻击者通过篡改该函数的 参数，可导致授权绕过。此攻击可远程发起。目前，用于修复该问题的拉取请求（Pull Request）正在等待审核接受。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112043
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file packages/trpc/server/routers/viewer/webhook/util.ts of the component Webhook Handler. Executing a manipulation of the argument ID can lead to authorization bypass. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112043
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112043
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-112043 (1)
Other References for CVE-2026-112043 (1)
IV. Related Vulnerabilities
Same product: cal.com
-
CVE-2026-109143
calcom cal.com/cal.diy Credentials delete credentials.delete -
CVE-2026-23478
Cal.com has an Authentication Bypass via Unvalidated Email i -
CVE-2025-66489
Cal.com Authentication Bypass via bad TOTP + password checks -
CVE-2025-31604
WordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XS -
CVE-2023-37919
Cal.com not expiring old sessions after enabling 2FA
Same vendor: calcom
-
CVE-2026-109143
calcom cal.com/cal.diy Credentials delete credentials.delete -
CVE-2026-104054
calcom cal.diy PBAC Permission BookingAccessService.ts doesU -
CVE-2025-71389
Cal.com before 5.9.9 Remote Code Execution via RSC -
CVE-2024-58355
Cal.com through 4.7.15 Cross-Site Scripting via booking ques -
CVE-2024-58354
cal.com Repository Takeover via pull_request_target Workflow
Same weakness: CWE-639
-
CVE-2026-112294
FlyCms through commit edfdf724 Missing Authorization via Act -
CVE-2026-112287
Krayin CRM before 2.2.7 Broken Object Level Authorization in -
CVE-2026-112286
Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Produ -
CVE-2026-111939
Frappe Helpdesk before 1.26.0 Authorization Bypass via raise -
CVE-2026-110902
WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct O
V. Comments for CVE-2026-112043
No comments yet