CVE-2026-52826

MEDIUM SEVERITY

Vulnerability Description

Kimai: Improper Authorization in Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulation

Published Date

July 14, 2026

Last Modified

July 14, 2026

Source

GitHub

Vendor

composer

Product

kimai/kimai