Is CVE-2026-19966 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19966?

CVE-2026-19966 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-19966

Description

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.