A vulnerability classified as problematic has been found in Open-Reception Appointment Booking Software up to 1.0.1. The impacted element is an unknown function of the file /api/auth/login of the component Passphrase Login. This manipulation causes improper restriction of excessive authentication attempts.
This vulnerability appears as CVE-2026-48084. The attack may be initiated remotely. There is no available exploit.
It is recommended to upgrade the affected component.
