L
Vendor security profile
Leantime
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical0
CISA KEV0
Public exploit6
Patch rate%67
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
6
2
3
1
CVE KEV
CVE severity distribution
12toplam CVE
High9 (75%)
Medium3 (25%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%50
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
8.8
CVE-2026-85990
Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods
L
Patch status unknown
7.1
CVE-2026-92772
Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX
L
Patch verifiedEPSS %1
8.8
CVE-2026-76647
Leantime JSON-RPC API contains a missing authorization vulnerability
L
Patch status unknownEPSS %1
8.1
CVE-2026-54418
Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and Bypass
L
Patch status unknownEPSS %0
8.6
CVE-2026-66416
Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware
L
Patch verifiedEPSS %0
8.4
CVE-2026-66415
Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()
L
Patch verifiedEPSS %0
5.1
CVE-2026-66414
Leantime Open Redirect in Login Controller via redirectUrl Parameter
L
Patch verifiedEPSS %0
7.1
CVE-2026-66412
Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC
L
Patch verifiedEPSS %0
8.6
CVE-2026-59712
Leantime - JSON-RPC API Broken Access Control via users.getUser
L
Patch verifiedEPSS %0
8.6
CVE-2026-59713
Leantime - OIDC Login CSRF via Unconditional State Verification Stub
L
Patch verifiedEPSS %0