Wekan vulnerabilities
36 CVEs and advisories name Wekan as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-25565WeKan < 8.19 Read-only Board Roles Can Update Cards
- CVE-2026-25564WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation
- CVE-2026-25563WeKan < 8.19 Checklist Creation Cross-Board IDOR
- CVE-2026-25562WeKan < 8.19 Attachments Publication Information Disclosure
- CVE-2026-25561WeKan < 8.19 Attachment Upload Object Relationship Validation Bypass
- CVE-2026-25560WeKan < 8.19 LDAP Authentication Filter Injection