CVE-2026-5799

Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026.

Score

CVSS 3.1 7.5 High

Status

Deferred - iletisim@usom.gov.tr

Published

2026-07-07

Last modified

2026-10-25

Weaknesses

CWE-639

Affected products

• Ontime (Idvlabs Software And Consulting Services Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0503