CVE-2026-76806

The open-source time-tracking application Solidtime (prior to version 0.16.0 ) is vulnerable to a Path Traversal flaw in its TogglDataImporter::importData() function. The vulnerability exists because the importer reads attacker-controlled project ID values from projects.json within uploaded ZIP f...