Vulnerabilities

TI-2026-84975 CVE-2026-121818 · GHSA-54r8-946x-g5g5

Public test signing key in Herowatch Go enables privilege escalation

LOW 38

Herowatch Mini developed by About Time Technologies has a system signing vulnerability.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-11-04 No fix listed CWE-1394

TI-2026-84974 CVE-2026-121817 · GHSA-33f3-4jq2-r259

LOW 38

Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00443 Published 2026-11-04 No fix listed CWE-639

TI-2026-84973 CVE-2026-121816 · GHSA-g88g-cww8-g52p

MEDIUM 40

Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00354 Published 2026-11-04 No fix listed CWE-306