Vulnerabilities

CVE-2026-28685 - Kimai: API invoice endpoint missing customer-level access control (IDOR)

2026-03-06 0 views admin

CVE ID : CVE-2026-28685 Published : March 6, 2026, 5:16 a.m. | 35 minutes ago Description : Kimai is a web-based multi-user time-tracking application. Prior to version 2.51.0,

CVE Details

CVE ID

CVE-2026-28685

Published

March 6, 2026

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2026-28685

CVE-2026-28685 - Kimai: API invoice endpoint missing customer-level access control (IDOR)

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2018-25179 - Gumbo CMS 0.99 SQL Injection via settings endpoint

CVE-2018-25178 - Easyndexer 1.0 Arbitrary File Download via showtif.php

CVE-2018-25180 - Maitra 1.7.2 SQL Injection and Database File Download

CVE-2018-25181 - Musicco 2.0.0 Arbitrary Directory Download via Path Traversal

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting