THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80193 (HIGH 8.8) — Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the Qu

[NVD] CVE-2026-80193 (HIGH 8.8) — Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the Qu

mednvdPublished 2026-08-26

CVE-2026-80193 CVSS: 8.8 HIGH Published: 2026-08-26T05:18:26.617

Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassing authorization checks enforced

Indicators of compromise

CVE-2026-80193cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80193