Missing Authorization Vulnerability in Timetics by Arraytics

CVE-2026-116860

What is CVE-2026-116860?

The Timetics plugin by Arraytics suffers from a missing authorization vulnerability, stemming from incorrectly configured access control security levels. This flaw can allow unauthorized users to gain access to restricted functionalities or sensitive information, thereby compromising the integrity of user data as well as the overall security of the application. Users of Timetics versions prior to 1.0.65 are particularly at risk and should take immediate action to mitigate these security concerns.

References