CyberSecBulletin

Kromitgmbh vulnerabilities

We track 2 vulnerabilities in Kromitgmbh products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2026.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Kromitgmbh vulnerabilities

  • 8.1 High severity

    titra: Improper Access Control

    CVE-2026-21694Kromitgmbh

    Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.9

  • 9.1 Critical severity

    Titra is open source project time tracking software.

    CVE-2025-69288Kromitgmbh

    Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule in the database. The value is then passed to a NodeVM value to execute as code. Without sanitization, it leads