Sploitus

10 exploited vulnerabilities in Cal.Com

Vulnerabilities with publicly known exploits

Vendors
Cal.Com, Vercel
With known exploits
10
Affected Cal Cal.com versions
< 6.0.7, 5.9.8, 3.1.4

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2025-71389 4 exploits
CVSS 10.0 CRITICAL 2025-12-03FIX AVAILABLE
CVE-2026-23478 1 exploit
CVSS 10.0 CRITICAL 2026-01-13FIX AVAILABLE
CVE-2024-58354
CVSS 9.9 CRITICAL 2026-07-23
CVE-2025-66489
CVSS 9.9 CRITICAL 2025-12-03FIX AVAILABLE
CVE-2024-58355
CVSS 9.3 CRITICAL 2026-07-23FIX AVAILABLE
CVE-2024-58353
CVSS 9.3 CRITICAL 2026-07-23FIX AVAILABLE
CVE-2023-37919
CVSS 6.5 MEDIUM 2023-07-25
CVE-2026-9349
CVSS 6.9 MEDIUM 2026-05-24FIX AVAILABLE
CVE-2026-9304
CVSS 5.0 MEDIUM 2026-05-23FIX AVAILABLE
CVE-2026-9303
CVSS 5.3 MEDIUM 2026-05-23FIX AVAILABLE