CVE-2026-19966

EUVD-2026-60011
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.65%
Common Weakness Enumeration
References
https://github.com/4m3rr0r/PoCVulDb/issues/19
https://vuldb.com/cve/CVE-2026-19966
https://vuldb.com/submit/873105
https://vuldb.com/vuln/391143
https://vuldb.com/vuln/391143/cti