CVE-2026-15586
CVE-2026-15586 · OTP Brute-Force Account Takeover in Idvlabs Software's Ontime
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 5.3 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
ontime
- Versions
- ≥ 0, ≤ 2026-10-27: Affected (date)
No fix published