CVE-2026-76806Medium 6.3Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle0.3%
CVE-2026-47236Medium 4.3Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission0.2%
CVE-2026-42279Medium 5.8solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID0.3%
CVE-2026-33345Medium 6.5solidtime vulnerable to IDOR in private projects0.4%