KI
Product
kimai
41
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 28Low 3
Watch
Add kimai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-80202 | 8.8 | Aug 25 | Kimai before 2.56.0 Authorization Bypass via TimesheetVoter Affected: before 2.56.0 |
| CVE-2026-80193 | 8.8 | Aug 25 | Kimai before 2.62.0 Authorization Bypass via QuickEntry Affected: before 2.62.0 |
| CVE-2023-53957 | 8.8 | Dec 19 | Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking Affected: 1.30.10 |
| CVE-2021-43515 | 7.8 | Apr 8 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai Affected: before 1.14.1 |
| CVE-2026-80198 | 7.5 | Aug 25 | Kimai before 2.56.0 Information Disclosure via config() Twig Function Affected: before 2.56.0 |
| CVE-2026-80196 | 7.5 | Aug 25 | Kimai before 2.58.0 Authentication Bypass via Password Reset Link Affected: before 2.58.0 |
| CVE-2023-46245 | 7.2 | Oct 31 | Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File Affected: < 2.1.0 |
| CVE-2026-52827 | 7.1 | Sep 15 | Kimai: Two-factor authentication bypass on the Kimai API Affected: < 2.59.0 |
Showing 8