CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts Vulnerability Report CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts Do Son July 20, 2026 0 TL;DR A critical Kimai vulnerability, CVE-2026-52824 (CVSS 9.1), affects the open-source time-tracking app’s official Docker image. The... Read More Read more about CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts