Is CVE-2026-112043 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112043?

CVE-2026-112043 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-112043

Description

A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file packages/trpc/server/routers/viewer/webhook/util.ts of the component Webhook Handler. Executing a manipulation of the argument ID can lead to authorization bypass. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.