TrxTimeATTENDANCE vulnerabilities

CVEs whose affected-version data names the TrxTimeATTENDANCE package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89308Critical· 9.3

1w ago

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

▾ MidnightTREXOM · TrxTimeATTENDANCEEPSS 3.0%via NVD