CVE-2026-112043 in cal.com
Prediction
by VulDB Data Team • 10/18/2026
A weakness has been identified in <a href="/product/calcom:cal">calcom cal.com and cal.diy up to 6.2.0</a>. Impacted is the function <code>createWebhookProcedure</code> of the file <em>packages/trpc/server/routers/viewer/webhook/util.ts</em> of the component <em>Webhook Handler</em>. Executing a manipulation of the argument <em>ID</em> can lead to authorization bypass. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.