Unknown Bookly

• CVE-2026-86838 Medium 5.3 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation 0.2%
• CVE-2026-86837 Medium 5.3 Bookly < 28.3 - Unauthenticated Customer PII Update via Verification Bypass 0.2%