Skip to content
OpenAdvisories

Vendor

DeskTime

1 known vulnerabilities.

Products

DeskTime Time Tracking App 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-10539

    Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App

    Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime update servers can return a malicious executable in response to …

    DeskTime DeskTime Time Tracking App