kimai

Top products

The 15 most recently published vulnerabilities affecting kimai.

• CVE-2026-84808Kimai before 2.65.0 Authorization Bypass via API Timesheet4.3Sep 2, 2026
• CVE-2026-84807Kimai before 2.65.0 Authentication Bypass via Team Creation5.4Sep 2, 2026
• CVE-2026-84806Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints5.4Sep 2, 2026
• CVE-2026-84805Kimai 2.61.0 before 2.63.0 Authentication Bypass via API4.3Sep 2, 2026
• CVE-2026-84804Kimai before 2.65.0 Authorization Bypass via Team Activity API5.4Sep 2, 2026
• CVE-2026-80202Kimai before 2.56.0 Authorization Bypass via TimesheetVoter8.8Aug 25, 2026
• CVE-2026-80201Kimai before 2.53.0 API Token Leakage via Invoice Template2.0Aug 25, 2026
• CVE-2026-80200Kimai before 2.53.0 Open Redirect via RelayState4.7Aug 25, 2026
• CVE-2026-80199Kimai before 2.54.0 Username Enumeration via Timing Oracle3.7Aug 25, 2026
• CVE-2026-80198Kimai before 2.56.0 Information Disclosure via config() Twig Function7.5Aug 25, 2026
• CVE-2026-80197Kimai before 2.57.0 Improper Authorization via Favorite Endpoints4.3Aug 25, 2026
• CVE-2026-80196Kimai before 2.58.0 Authentication Bypass via Password Reset Link7.5Aug 25, 2026
• CVE-2026-80195Kimai before 2.63.0 Team Membership Removal via API5.4Aug 25, 2026
• CVE-2026-80194Kimai before 2.64.0 Missing Authorization via ProjectViewController export4.3Aug 25, 2026
• CVE-2026-80193Kimai before 2.62.0 Authorization Bypass via QuickEntry8.8Aug 25, 2026