Medium 5.9
2026-04-08< 1.1.39
CVE-2026-39541
Minimum safe version
1.1.39
Update to 1.1.39 or later to address 9 fixable vulnerabilities
CVE-2026-39541
CVE-2025-68027
CVE-2025-68055
CVE-2025-12787
CVE-2025-12788
CVE-2025-49377
CVE-2025-49378
Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function
CVE-2025-49323