CVE-2026-21694mediumCWE-284

CVE-2026-21694: medium-severity vulnerability in kromitgmbh titra

Titra APIs have Improper Access Control

Published · Updated

Follow this CVE+ Monitor titra

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.3%
Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products
kromitgmbh · titra
Related CVEs — kromitgmbh titra

In the same product, most dangerous first.

CVE-2025-69288CRITICALTitra has Remote Code Execution in Admin FunctionalityEPSS 0.9%CVE-2026-21695MEDIUMTitra API Contains Mass Assignment VulnerabilityEPSS 0.3%