Brute Force Vulnerability in Ontime by İdvlabs Software and Consulting Services Inc.
CVE-2026-15586

5.3MEDIUM

Key Information:

Vendor

İdvlabs Software And Consulting Services Inc.

Status
Ontime
Vendor
CVE Published:
27 October 2026

What is CVE-2026-15586?

A vulnerability has been identified in the Ontime product by İdvlabs Software and Consulting Services Inc., allowing attackers to exploit improper restrictions on excessive authentication attempts, potentially leading to brute force attacks. This flaw remains unaddressed as the vendor has not responded to disclosure attempts.

Affected Version(s)

Ontime 0 <= 2026-10-27

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.