Draugiemgroup

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Draugiemgroup records in CISA KEV

No Draugiemgroup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Desktime Time Tracking 1 record MEDIUM

Records

1 record in Desktime Time Tracking · all components

TI-2025-09644 CVE-2025-10539 · GHSA-m272-rh3v-6hfm

Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App

MEDIUM 55

Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime update servers can return…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00179 Published 2026-04-28 Fixed in 1.3.674 CWE-295

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0