VYPR

WorkTime monitoring daemon

by WorkTime

CVEs (1)

  • CVE-2025-15561HigFeb 19, 2026
    risk 0.51cvss 7.8epss 0.00

    An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYSTEM. A malicious executable must be named  WTWatch.exe and dropped in the C:\ProgramData\wta\ClientExe directory, which is writable by…