Security Advisory

CVE-2026-19966

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 00:15:09
Last updated 2026-08-17 16:08:32
Assigner VulDB
CVSS score 5.5
State PUBLISHED

Description

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.