K
Vendor security profile
kimai
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical2
CISA KEV0
Public exploit8
Patch rate%3
Avg. CVSS6.4
12-month vulnerability rate
0
1
0
1
0
0
0
0
0
10
17
0
CVE KEV
CVE severity distribution
29toplam CVE
Critical2 (7%)
High8 (28%)
Medium18 (62%)
Low1 (3%)
Patch and exploitation view
%3
Verified patch
%0
CISA KEV
%28
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
28Unknown
Latest vulnerabilities
7.1
CVE-2026-52827Kimai: Two-factor authentication bypass on the Kimai API
Patch status unknownEPSS %1
9.1
CVE-2026-52824Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Patch status unknown Public Exploits:2EPSS %1