CVE-2026-84805 | Kimai up to 2.62.x WorkContractPreferenceSubscriber permission

September 2, 2026 Yanac

A vulnerability described as critical has been identified in Kimai up to 2.62.x. This vulnerability affects unknown code of the component WorkContractPreferenceSubscriber. Such manipulation leads to permission issues.

This vulnerability is referenced as CVE-2026-84805. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More