Vendor

    Cal

    4 known vulnerabilities in products by Cal, 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cal
    CriticalCVE-2025-66489

    Cal.com Authentication Bypass via bad TOTP + password checks

    also in 1 other product

    		9.8
    CriticalCVE-2026-23478

    Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback

    also in 1 other product

    		9.8
    HighCVE-2023-1647

    Improper Access Control in calcom/cal.com

    also in 1 other product

    		8.8
    MediumCVE-2023-37919

    Cal.com not expiring old sessions after enabling 2FA

    also in 1 other product

    		6.5

    Products

    Products by Cal
    Cal.com40