CVE-2026-25565 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring wr…
High CVSS: 7.1

CVE-2026-25565

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.
Vendor
Wekan Project
Product
Wekan
CWE
CWE-863
Yayın Tarihi
2026-02-07 22:16:02
Güncelleme
2026-02-10 21:57:16
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-863 Wekan HIGH Wekan Project 2026

Referanslar

https://github.com/wekan/wekan/commit/181f837d8cbae96bdf9dcbd31beaa3653c2c0285 https://wekan.fi/ https://www.vulncheck.com/advisories/wekan-read-only-board-roles-can-update-cards