CVE-2026-6376 — A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This res — CVE Database · The Intelligence Room