CVE-2026-84768

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

• Published Sep 3, 2026
• CVSS 9.3 critical
• 0.4% chance of exploitation in the next 30 days (EPSS)

CVE-2026-84768 at the National Vulnerability Database