Skip to content
OpenAdvisories

Vendor

TREXOM

1 known vulnerabilities.

Products

TrxTimeATTENDANCE 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-89308

    Arbitrary command execution in TrxTimeATTENDANCE

    An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

    TREXOM TrxTimeATTENDANCE