CVE-2026-84767: Nexcess Bookit

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

Affected products

• Nexcess Bookit: up to and including 2.6.0.3

Published 2026-09-03. Last modified 2026-09-04.