Timetics missing authorization flaw affects versions through 1.0.65 (EUVD-2026-114004)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Arraytics
- Product
- Timetics
- First seen
Summary
The EUVD record, updated October 30, 2026, rates this missing-authorization flaw 5.3/10 (CVSS v3.1). It affects Timetics through version 1.0.65.
If you use Arraytics
Update Timetics to a version later than 1.0.65
Review access control and role settings in the plugin
Check for unexpected records or changes made by low-privilege users
Update Booktics to a version later than 1.0.31 when available
Check the EUVD entry EUVD-2026-114268 for patch status
Audit access-control settings in Booktics until patched
What the sources say 3
· Mastodon: “Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.65.” Source
· Mastodon: “Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.” Source
· Mastodon: “Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.” Source