CVE-2026-21694CWE-284

Titra APIs have Improper Access Control

Medium · published January 7, 2026

CVSS v3.1
6.8
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-01-07T23:10Z
EPSS history
Timeline
  • 07 JAN 23:10Z
    Titra APIs have Improper Access Control
    cvelistv5