CVE-2026-28685 Blast Radius

MEDIUM • CVSS 6.5Kimai is a web-based multi-user time-tracking application. Prior to version 2.51.0, "GET /api/invoices/{id}" only checks the role-based view_invoice p…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-28685.

Start Free Scan →← Back to CVE-2026-28685