https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T22:57:57.038355+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-15559 fkie_cve-2025-15559 2026-09-28T22:57:57.115536+00:00

An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from the WorkTime server is vulnerable in the “guid” parameter. This allows an attacker to execute arbitrary commands on the WorkTime server as NT Authority\SYSTEM with the highest privileges. Attackers are able to access or manipulate sensitive data and take over the whole server.

 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0228 GCVE-1988-2026-0228 — SEC Consult SA-20260218-0 :: Multiple Critical Vulnerabilities in NesterSoft WorkTime (on-prem/cloud) 2026-09-28T22:57:57.115650+00:00

Affected: Nestersoft SEC Consult SA-20260218-0

SEC Consult Vulnerability Lab Security Advisory < 20260218-0 > ======================================================================= title: Multiple Critical Vulnerabilities product: NesterSoft WorkTime (on-prem/cloud) vulnerable version: <= 11.8.8 fixed version: No patch available, vendor unresponsive. CVE number: CVE-2025-15563, CVE-2025-15562, CVE-2025-15561 CVE-2025-15560, CVE-2025-15559             impact: Critical homepage:https://www.worktime.com/ found: 2025-05-22 by: Tobias Niemann (Office Bochum) Daniel Hirschberger Thorger Jansen (Office Bochum) Marius Renner (Office Berlin) SEC Consult Vulnerability Lab

An integrated part of SEC Consult, an Atos business Europe | Asia

https://www.sec-consult.com

=======================================================================

Vendor description: ------------------- "WorkTime is a green employee monitoring software with a primary focus on monitoring employees' productivity. It is a non-invasive, transparent, safe, and socially responsible technology. WorkTime offers a safe replacement for every invasive function."

Source:https://www.worktime.com/employee-monitoring

Business recommendation: ------------------------ The vendor did not respond to our communication attempts anymore. It i…

 https://vulnerability.circl.lu/vuln/ghsa-p5gf-vhgm-432f GHSA-p5gf-vhgm-432f 2026-09-28T22:57:57.115817+00:00

An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from the WorkTime server is vulnerable in the “guid” parameter. This allows an attacker to execute arbitrary commands on the WorkTime server as NT Authority\SYSTEM with the highest privileges. Attackers are able to access or manipulate sensitive data and take over the whole server.