Vulnerabilidades de Idvlabs Software and Consulting Services Inc.
CVEs publicadas que afetam produtos de Idvlabs Software and Consulting Services Inc.: 3 registro(s), com severidade, exploração e correções.
CVE-2026-15586
Média · 5.3
CWE-307 27/10/2026
OTP Brute-Force Account Takeover in Idvlabs Software's Ontime
Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force.
This issue affects Ontime: through 2026-10-27.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-5799
Alta · 7.5
CWE-639 07/07/2026
IDOR in Idvlabs' Ontime
Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers.
This issue affects Ontime: through 04052026.
CVE-2026-5730
Alta · 7.5
CWE-639 07/07/2026
IDOR in Idvlabs' Ontime
Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers.
This issue affects Ontime: through 04052026.