tocsin

CVE-2026-52828

1 advisory.

Packagist/kimai/kimai CVE-2026-52828: medium, EPSS 0.46%

Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Access

Action: Upgrade kimai/kimai to 2.58.0 or later.

composer require kimai/kimai:2.58.0

Affected

introducedfixedlast affected
02.58.0-

Fixed versions

2.58.0

Sources

CVE-2026-52828 · published · modified · JSON