Skip to content
OpenAdvisories

Vendor

Q-Free

43 known vulnerabilities.

Products

MaxTime 43
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 8.8
    CVE-2025-26378

    A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0…

    Q-Free MaxTime
  • High 8.1
    CVE-2025-26377

    A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0…

    Q-Free MaxTime
  • High 8.8
    CVE-2025-26375

    A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0…

    Q-Free MaxTime
  • High 7.1
    CVE-2025-26372

    A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version …

    Q-Free MaxTime
  • High 8.8
    CVE-2025-26371

    A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version …

    Q-Free MaxTime
  • High 7.1
    CVE-2025-26370

    A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version …

    Q-Free MaxTime
  • High 8.8
    CVE-2025-26369

    A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version …

    Q-Free MaxTime
  • High 8.1
    CVE-2025-26368

    A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version …

    Q-Free MaxTime
  • High 7.5
    CVE-2025-26366

    A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or …

    Q-Free MaxTime
  • High 7.5
    CVE-2025-26365

    A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or …

    Q-Free MaxTime
  • High 7.5
    CVE-2025-26364

    A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or …

    Q-Free MaxTime
  • High 7.5
    CVE-2025-26363

    A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or …

    Q-Free MaxTime
  • High 7.5
    CVE-2025-26362

    A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or …

    Q-Free MaxTime
  • High 7.2
    CVE-2025-26356

    A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free MaxTime less than or equa…

    Q-Free MaxTime
  • High 7.2
    CVE-2025-26354

    A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime less than or equal to …

    Q-Free MaxTime
  • High 7.2
    CVE-2025-26349

    A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or equal to version 2.11.0 …

    Q-Free MaxTime
  • High 8.1
    CVE-2025-26343

    A CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than or equal to version 2.…

    Q-Free MaxTime
  • High 8.8
    CVE-2025-26340

    A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11…

    Q-Free MaxTime