Description
An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences.
Medium · 5.3
CVE-2026-36726
EUVD-2026-35928GHSA-rwch-jcv7-28jf
An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers …
Published Jun 9, 2026 · Updated Jun 10, 2026 · Assigned by mitre