VulnSocial

CVE-2026-52824Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 4d ago at 2 mentions (2026-07-20); latest day: 1
  • 6 total mentions across 5 days

Deep dive

Activity timeline6 mentions / 5d
01122Mentions · 2026-07-20: 2Mentions · 2026-07-21: 1Mentions · 2026-07-22: 1Mentions · 2026-07-27: 1Mentions · 2026-09-17: 1Patch / Workaround · 2026-07-20: 1Patch / Workaround · 2026-07-22: 1Technical Details · 2026-07-20: 2Technical Details · 2026-07-21: 1Technical Details · 2026-07-22: 1Technical Details · 2026-07-27: 107-2007-2107-2207-2709-17
Signal classification3 categories
Disclosure
350.0%
Patch
233.3%
General
116.7%
Referenced assets8 URLs
Classification over time
DateTotalLabels
2026-07-202
Disclosure1Patch1
2026-07-211
Disclosure1
2026-07-221
Patch1
2026-07-271
Disclosure1
2026-09-171
General1
Full discourse6 posts
  • FOFA@fofabot
    Disclosure

    ⚠️⚠️ CVE-2026-52824 (CVSS 9.1): Kimai official Docker image ships a known default APP_SECRET — unauthenticated cookie forgery can take over accounts (incl. super_admin) when 2FA is off. 🔗FOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJLaW1haSI%3D 🎯9.2K+ Results are found on http://en.fofa.info in the past year. FOFA Query: app="Kimai" 🔖Refer: https://securityonline.info/kimai-account-takeover/ #OSINT #FOFA #CyberSecurity #Vulnerability

    Post summary

    The tweet announces a high‑severity Kimai default secret vulnerability (CVE‑2026‑52824), noting how unauthenticated cookie forgery can lead to account takeover, and provides an FOFA link and reference, but no proof of concept, exploit tool, or patch.

    1603663.2K
    14.7K followersView on X
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-52824 - critical 🚨 Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass > Kimai Docker images <= 2.57.0 ship with a hardcoded APP_SECRET of "change_this_to_som... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-52824 @pdnuclei #NucleiTemplates #cve

    Post summary

    CVE-2026-52824 is a critical authentication bypass in Kimai Docker images (≤2.57.0) caused by a hardcoded default APP_SECRET. No PoC, exploit, patch, or active exploitation details are provided.

    00011289
    1.1K followersView on X
  • iototsecnews@iototsecnews
    Disclosure

    Kimai Docker の脆弱性 CVE-2026-52824：デフォルト APP_SECRET の悪用によるアカウント乗っ取り https://iototsecnews.jp/2026/07/20/kimai-docker-vulnerability-exposes-default-app_secret-enabling-account-takeover/ 今回の問題は、公式 Docker イメージの初期設定に含まれていた、暗号鍵 APP_SECRET のデフォルト値が使用できてしまう仕組みに起因します。この鍵は、セキュリティ・データの検証に使われる大切なものですが、起動時に変更を強制する検証などがなかったことで、推測可能な鍵が運用されるリスクが生じていました。それにより、アカウント乗っ取りの脆弱性 CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) が発生しています。ご利用のチームは、ご注意ください。 #CVE202652824 #Docker #Kimai #Vulnerability

    Post summary

    The article announces a Kimai Docker vulnerability (CVE‑2026‑52824) caused by a default APP_SECRET that can be exploited for account takeover, but it provides only technical details and no PoC, exploit code, or patch information.

    01000118
    503 followersView on X
  • Halil Deniz@denizhalilT
    Patch

    🚨 Critical flaw in Kimai <= 2.57.0! CVE-2026-52824 (CVSS 9.8) allows unauthenticated account takeover via default APP_SECRET keys. Read full analysis & fix: https://denizhalil.com/2026/07/22/cve-2026-52824-kimai-authentication-bypass/ #CVE202652824 #Kimai #CyberSecurity https://t.co/6397fF6uX6

    Post summary

    The tweet announces a critical flaw (CVE-2026-52824) in Kimai versions ≤2.57.0 that allows unauthenticated account takeover through default APP_SECRET keys and references a fix.

    0001052
    32 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Kimai vulnerability CVE-2026-52824 (CVSS 9.1) lets attackers forge cookies for account takeover via a default Docker APP_SECRET. Update to 2.58.0 now. #Kimai #AccountTakeover #Docker #CVE202652824 #OpenSource http://securityonline.info/kimai-account-takeover/

    Post summary

    The post reports a high‑severity Kimai vulnerability (CVE-2026‑52824) allowing cookie forgery for account takeover and urges users to upgrade to version 2.58.0.

    00010456
    12.5K followersView on X
  • Cybersecurity News DE@cybsecuritynews
    General

    #schwachstellen Kritische Kimai-Lücke in Docker-Installationen erlaubt Kontoübernahme ohne Passwort #cve202652824 #docker #kimai #symfony https://cybersecurity-news.de/cve-2026-52824-kimai-docker-kontouebernahme-ohne-passwort

    Post summary

    The tweet announces a critical vulnerability in Kimai Docker installations that allows account takeover without a password, but lacks details on PoC, exploitation, patches, or technical specifics.

    0000034
    12 followersView on X

Explore more

Back to dashboard