Product by Calcom

    Cal.com

    6 known vulnerabilities in Cal.com (Calcom), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cal.com (Calcom)
    CriticalCVE-2025-66489

    Cal.com Authentication Bypass via bad TOTP + password checks

    also in 1 other product

    		9.8
    CriticalCVE-2026-23478

    Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback

    also in 1 other product

    		9.8
    HighCVE-2023-1647

    Improper Access Control in calcom/cal.com

    also in 2 other products

    		8.8
    MediumCVE-2026-112043

    calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization

    also in 1 other product

    		6.3
    MediumCVE-2026-109143

    calcom cal.com/cal.diy Credentials delete credentials.delete privileges management

    also in 1 other product

    		5.4
    MediumCVE-2023-37919

    Cal.com not expiring old sessions after enabling 2FA

    also in 1 other product

    		6.5

    All products by Calcom