CVE-2026-5799

HighCVSS 7.5

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

An authorization bypass vulnerability in Ontime through a user-controlled key allows exploitation of trusted identifiers. Affects versions up to 04052026.

Risk Assessment

An attacker may gain unauthorized access to system resources or functions, potentially leading to data confidentiality and integrity breaches.

Recommendation

Immediately update Ontime to the latest version after 04052026 and review authorization configuration.

Original NVD description (English source)

Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026.