Kimai

www.kimai.org ↗
C
CAUTION
10
Total CVEs
0
Crit / High
7
Medium
4%
Unpatched
8%
Patched
5.2
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
8%
Unpatched
4%
Under Review
88%
✓ 2 patched ✗ 1 unpatched ~ 22 under review
▸ Intelligence by Audience
PoC Available
3 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"kimai" port:443
org:"Kimai" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-52824 1.33% exploitation probability
CVE-2026-52827 0.58% exploitation probability
CVE-2026-52819 0.50% exploitation probability
CVE-2026-52828 0.46% exploitation probability
CVE-2026-52822 0.46% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
10
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
4%
Avg CVSS score
5.2
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Kimai Docker Flaw Lets Unauthenticated Attackers Forge Cookies and Take Over Accounts - CyberSecurityNews
CyberSecurityNews 2026-07-20
CyberPress Weekly – Top 50 Cybersecurity Stories of the Week – Cl0p Windchill Zero-Day, Zimbra Attacks, 23M-User Breach, AI Exploits & More - Cyber Press
Cyber Press 2026-07-27
▸ Recent CVEs showing 20 of 25
CVE IDSeverityPatchEPSSDate
CVE-2026-52819 6.5 MEDIUM PATCH UNDER REVIEW 0.50% 2026-09-15
CVE-2026-52828 7.1 HIGH PATCH UNDER REVIEW 0.46% 2026-09-15
CVE-2026-52827 8.1 HIGH PATCH UNDER REVIEW 0.58% 2026-09-15
CVE-2026-52826 6.5 MEDIUM PATCH UNDER REVIEW 0.43% 2026-09-15
CVE-2026-52824 PoC 7.4 HIGH PATCH UNDER REVIEW 1.33% 2026-09-15
CVE-2026-52821 6.5 MEDIUM PATCH UNDER REVIEW 0.43% 2026-09-15
CVE-2026-52820 7.1 HIGH PATCH UNDER REVIEW 0.45% 2026-09-15
CVE-2026-52823 4.3 MEDIUM PATCH UNDER REVIEW 0.30% 2026-09-15
CVE-2026-52822 6.5 MEDIUM PATCH UNDER REVIEW 0.46% 2026-09-15
CVE-2026-52825 8.1 HIGH PATCH UNDER REVIEW 0.45% 2026-09-15
CVE-2026-49992 PoC 3.5 LOW PATCH UNDER REVIEW 0.22% 2026-09-11
CVE-2026-84808 4.3 MEDIUM PATCH UNDER REVIEW 0.18% 2026-09-02
CVE-2026-84804 5.4 MEDIUM PATCH UNDER REVIEW 0.19% 2026-09-02
CVE-2026-80193 8.8 HIGH PATCH UNDER REVIEW 0.36% 2026-08-26
CVE-2026-80202 8.8 HIGH PATCH UNDER REVIEW 0.34% 2026-08-26
CVE-2026-80195 PoC 5.4 MEDIUM PATCH UNDER REVIEW 0.28% 2026-08-26
CVE-2026-80198 7.5 HIGH PATCH UNDER REVIEW 0.34% 2026-08-26
CVE-2026-80201 2.0 LOW PATCH UNDER REVIEW 0.20% 2026-08-26
CVE-2026-80194 4.3 MEDIUM PATCH UNDER REVIEW 0.24% 2026-08-26
CVE-2026-80199 3.7 LOW PATCH UNDER REVIEW 0.25% 2026-08-26
View all 25 CVEs for Kimai →
▸Intel
Trust ScoreC — CAUTION
Max CVSS6.8
Last Updated2026-07-08
▸Top Weaknesses
CWE-862
Unknown Weakness Type
2 occurrences in Kimai CVEs (20% of total)
CWE-862 ⓘ
2
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Kimai CVEs (10% of total)
CWE-79 ⓘ
1
CWE-200
Sensitive Information Exposure
1 occurrence in Kimai CVEs (10% of total)
CWE-200 ⓘ
1
CWE-863
Incorrect Authorization
1 occurrence in Kimai CVEs (10% of total)
CWE-863 ⓘ
1
CWE-1275
Unknown Weakness Type
1 occurrence in Kimai CVEs (10% of total)
CWE-1275 ⓘ
1
CWE-1336
Unknown Weakness Type
1 occurrence in Kimai CVEs (10% of total)
CWE-1336 ⓘ
1
CWE-73
Unknown Weakness Type
1 occurrence in Kimai CVEs (10% of total)
CWE-73 ⓘ
1
CWE-915
Unknown Weakness Type
1 occurrence in Kimai CVEs (10% of total)
CWE-915 ⓘ
1
▸Company Profile

Kimai is an open-source time-tracking software vendor that provides a web-based application for businesses and freelancers to manage employee timesheets, project billing, and attendance. While not a major cybersecurity vendor, its relevance lies in the potential exposure of sensitive time and billing data if vulnerabilities are exploited. The project is maintained by a small community of developers.

▸Response Metrics
Est. MTTR ⓘ ~420 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +600% worse
CVE count 2026 vs 2025:  1 → 7 CVEs
Patch Speed ⓘ Average (40–65%)
4% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€360K
Est. GDPR High
€3.6M

Based on 0 critical CVEs, 0 CISA KEV, 60% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Kimai C valtersit.com