CVE-2018-17486: Jollytech Lobby Track

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.

Affected products

• Jollytech Lobby Track: version 8.2.186 only

Published 2019-03-21. Last modified 2026-06-17.