Advisories · Technology

solidtime.

Every CVE that names solidtime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76806 CVE record

CVSS 6.3 Medium

Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle
- solidtime
- Path traversal
Not analysed yet 4 Nov 2026
CVE-2026-47236 CVE record

CVSS 4.3 Medium

Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission
- solidtime
- Broken access control
Not analysed yet 12 Jun 2026
CVE-2026-42279 CVE record

CVSS 5.8 Medium

solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID
- solidtime
- Broken access control
Not analysed yet 8 May 2026
CVE-2026-33345 CVE record

CVSS 6.5 Medium

solidtime vulnerable to IDOR in private projects
- solidtime
- Broken access control
Not analysed yet 24 Mar 2026