Log in Start free

solidtime-io

Products

ProductCVEsExploitedLatest
solidtime4–Nov 4, 2026

Exploited and recent CVEs

  • CVE-2026-76806 Medium 6.3 Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle 0.3%
  • CVE-2026-47236 Medium 4.3 Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission 0.2%
  • CVE-2026-42279 Medium 5.8 solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID 0.3%
  • CVE-2026-33345 Medium 6.5 solidtime vulnerable to IDOR in private projects 0.4%