Question 1

What is CVE-2026-63497 — CVE-2026-63497?

Accepted Answer

titra is an open source time tracking project. In versions 1.0.3 and prior, authenticated API users can abuse the customfields object to inject or overwrite top-level fields in MongoDB documents. At time of publication, there are no publicly known patches.

Question 2

What is the authoritative source for CVE-2026-63497?

Accepted Answer

CVE-2026-63497 (CVE-2026-63497) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-63497CVE-2026-63497

Description

Scoring