Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Leantime

Leantime JSON-RPC API vulnerabilities

1 published CVE names Leantime JSON-RPC API among the affected products.

All 1 in the listAtom feed of new CVEs
Published CVEs
1
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 1Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2026-76647

    Leantime JSON-RPC API contains a missing authorization vulnerability

    Leantime · JSON-RPC API

    High8.8

Most common weaknesses

  1. CWE-200 Exposure of sensitive information1
  2. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  3. CWE-862 Missing authorization1