Products: 1
    Vulnerabilities: 25
    Known Exploited: 0
    2
    Critical Level Threats
    11
    High Level Threats
    7
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-68901

    WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service

    Last Modified: Aug 19, 2026
    Published: Aug 19, 2026

    CVE-2026-68900

    Wekan: Stored XSS in HTML board exports through a card-title second parse

    Last Modified: Aug 19, 2026
    Published: Aug 19, 2026

    CVE-2026-68899

    Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallback

    Last Modified: Aug 21, 2026
    Published: Aug 19, 2026

    CVE-2026-68561

    Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule

    Last Modified: Aug 25, 2026
    Published: Aug 19, 2026

    CVE-2026-68560

    Wekan:hell Injection in External Antivirus Scanner Path via asyncExec

    Last Modified: Aug 21, 2026
    Published: Aug 19, 2026
    Items Per Page