CVE-2026-5799 is classified under CWE-639 (Authorization Bypass Through User-Controlled Key) affecting Ontime software by Idvlabs Software and Consulting Services Inc. The vulnerability allows an attacker to bypass authorization controls by exploiting trusted identifiers that are user-controlled. This can lead to unauthorized access to sensitive information. The affected versions include all Ontime releases up to and including version 04052026. The vulnerability has a CVSS 3.1 score of 7.5, reflecting a high severity with network exploitability and no required privileges or user interaction. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

The vulnerability allows an attacker to bypass authorization mechanisms by manipulating user-controlled keys, potentially exposing sensitive information (confidentiality impact). There is no impact on integrity or availability. The attack can be performed remotely without authentication or user interaction, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to the affected software where possible and review usage of trusted identifiers to limit exposure.