Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#LatePoint

1 articles

Deep Dive

LatePoint Booking Plugin Account Takeover (CVE-2026-118066)

An unauthenticated SQL injection in LatePoint lets an attacker take over a customer account. Fixed in 5.7.7; 5.7.8 completes the hardening.

Ostorlab Team
Nov 07, 2026