CVE Intelligence

Idvlabs Software and Consulting Services Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Idvlabs Software and Consulting Services Inc. products: 3 record(s), with severity, exploitation and fixes.

Ontime 3

Exploited only (KEV) →

CVE-2026-15586 Medium · 5.3 CWE-307 Oct 27, 2026
OTP Brute-Force Account Takeover in Idvlabs Software's Ontime
Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-5799 High · 7.5 CWE-639 Jul 7, 2026
IDOR in Idvlabs' Ontime
Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026.
CVE-2026-5730 High · 7.5 CWE-639 Jul 7, 2026
IDOR in Idvlabs' Ontime
Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026.