Products: 3
    Vulnerabilities: 48
    Known Exploited: 0
    3
    Critical Level Threats
    6
    High Level Threats
    22
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-52827

    Kimai: Two-factor authentication bypass on the Kimai API

    Last Modified: Sep 16, 2026
    Published: Sep 15, 2026

    CVE-2026-52822

    Kimai: Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocation

    Last Modified: Sep 15, 2026
    Published: Sep 15, 2026

    CVE-2026-52828

    Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Access

    Last Modified: Sep 15, 2026
    Published: Sep 15, 2026

    CVE-2026-52826

    Kimai: Improper Authorization in Kimai Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulation

    Last Modified: Sep 15, 2026
    Published: Sep 15, 2026

    CVE-2026-52823

    Kimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State Changes

    Last Modified: Sep 15, 2026
    Published: Sep 15, 2026
    Items Per Page
    Kimai Vulnerabilities & Security CVEs | CVE-DB