Known vulnerabilities in kimai2

Software: kimai2
Software CPE: cpe:2.3:a:kevin_papst:kimai2:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting kimai2 kimai2 is affected by 38 known vulnerabilities: 2 high, 6 medium, 30 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144295 - Incorrect Authorization
CVE-2026-84806
CWE-863 Low
No
No
2.63.0 19.08.2026 SB2026081392
#VU144294 - Improper Access Control
CVE-2026-84805
CWE-284 Low
No
No
2.63.0 19.08.2026 SB2026081392
#VU144293 - Missing Authorization
CVE-2026-84804
CWE-862 Low
No
No
2.65.0 19.08.2026 SB2026081945
#VU144257 - Incorrect Authorization
CVE-2026-84808
CWE-863 Low
No
No
2.65.0 19.08.2026 SB2026081945
#VU144256 - Incorrect Authorization
CVE-2026-84807
CWE-863 Low
No
No
2.65.0 19.08.2026 SB2026081945
#VU142430 - Missing Authorization
CVE-2026-80194
CWE-862 Low
No
No
2.64.0 13.08.2026 SB2026081394
#VU142429 - Missing Authorization
CVE-2026-80193
CWE-862 Low
No
No
2.62.0 13.08.2026 SB2026081393
#VU142428 - Improper Enforcement of Behavioral Workflow
CVE-2026-80195
CWE-841 Low
No
No
2.63.0 13.08.2026 SB2026081392
#VU138954 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63008
CWE-89 High
No
No
2.60.0 21.07.2026 SB20260721139
#VU135851 - Improper Authentication
CVE-2026-52827
CWE-287 Medium
No
No
2.59.0 29.06.2026 SB20260629128
#VU135850 - Missing Authorization
CVE-2026-52822
CWE-862 Low
No
No
2.58.0 29.06.2026 SB2026060457
#VU135849 - Authorization Bypass Through User-Controlled Key
CVE-2026-52826
CWE-639 Low
No
No
2.57.0 29.06.2026 SB20260629127
#VU135848 - Missing Authorization
CVE-2026-52825
CWE-862 Low
No
No
2.58.0 29.06.2026 SB2026060457
#VU135847 - Insecure Default Initialization of Resource
CVE-2026-52824
CWE-1188 Medium
No
No
2.58.0 29.06.2026 SB2026060457
#VU135846 - Missing Authorization
CVE-2026-52828
CWE-862 Low
No
No
2.58.0 29.06.2026 SB2026060457
#VU135845 - Cross-Site Request Forgery (CSRF)
CVE-2026-52823
CWE-352 Low
No
No
2.58.0 29.06.2026 SB2026060457
#VU135844 - Authorization Bypass Through User-Controlled Key
CVE-2026-52821
CWE-639 Low
No
No
2.57.0 29.06.2026 SB20260629127
#VU135843 - Incorrect Authorization
CVE-2026-52819
CWE-863 Low
No
No
2.57.0 29.06.2026 SB20260629127
#VU135842 - Authorization Bypass Through User-Controlled Key
CVE-2026-52820
CWE-639 Low
No
No
2.57.0 29.06.2026 SB20260629127
#VU135841 - Authorization Bypass Through User-Controlled Key
CVE-2026-80197
CWE-639 Low
No
No
2.57.0 29.06.2026 SB20260629127


Showing elements 1 - 20 out of 38