TI-2026-12950 CVE-2026-15389 · GHSA-98qr-jpxv-vfp8Inadequate access control in Sesame Time session managementPriority MEDIUM 44A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00441 · Published 2026-07-14 · No fix listed CWE-639