CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,496
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product wekan_project:wekan. Show all products

34 CVEs, showing 1 to 34
CVESeverityTitlePublished
CVE-2025-65778High 8.1An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
CVE-2025-65779High 7.5An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
CVE-2025-65780High 8.8An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
CVE-2025-65781High 8.2An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
CVE-2025-65782Medium 6.5An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
CVE-2026-1892Medium 5.0A security vulnerability has been detected in WeKan up to 8.20.Feb 4, 2026
CVE-2026-1894Medium 5.4A vulnerability was detected in WeKan up to 8.20.Feb 4, 2026
CVE-2026-1895Medium 6.3A flaw has been found in WeKan up to 8.20.Feb 4, 2026
CVE-2026-1896Medium 6.3A vulnerability has been found in WeKan up to 8.20.Feb 5, 2026
CVE-2026-1897Medium 4.3A vulnerability was found in WeKan up to 8.20.Feb 5, 2026
CVE-2026-1898Medium 6.3A vulnerability was determined in WeKan up to 8.20.Feb 5, 2026
CVE-2026-1962Critical 9.8A vulnerability has been found in WeKan up to 8.20.Feb 5, 2026
CVE-2026-1963Critical 9.8A vulnerability was found in WeKan up to 8.20.Feb 5, 2026
CVE-2026-1964Medium 5.3A vulnerability was determined in WeKan up to 8.20.Feb 5, 2026
CVE-2026-25560Critical 9.8WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication.Feb 7, 2026
CVE-2026-25561High 7.5WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API.Feb 7, 2026
CVE-2026-25562Medium 4.3WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication.Feb 7, 2026
CVE-2026-25563High 7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes.Feb 7, 2026
CVE-2026-25564High 7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes.Feb 7, 2026
CVE-2026-25565Medium 6.5WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission.Feb 7, 2026
CVE-2026-25566Medium 5.4WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic.Feb 7, 2026
CVE-2026-25567Medium 4.3WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in the card comment creation API.Feb 7, 2026
CVE-2026-25568Medium 4.3WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time.Feb 7, 2026
CVE-2026-25859High 8.8Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permission checks, potentially resulting in unauthorized migration operations.Feb 7, 2026
CVE-2026-2205Medium 4.3A vulnerability was identified in WeKan up to 8.20.Feb 8, 2026
CVE-2026-2206High 8.8A security flaw has been discovered in WeKan up to 8.20.Feb 8, 2026
CVE-2026-2207Medium 5.3A weakness has been identified in WeKan up to 8.20.Feb 8, 2026
CVE-2026-2208Medium 6.5A security vulnerability has been detected in WeKan up to 8.20.Feb 8, 2026
CVE-2026-2209Medium 4.3A vulnerability was detected in WeKan up to 8.18.Feb 8, 2026
CVE-2026-30843Medium 6.5Wekan is an open source kanban tool built with Meteor.Mar 6, 2026
CVE-2026-30844High 8.1Wekan is an open source kanban tool built with Meteor.Mar 6, 2026
CVE-2026-30845High 8.2Wekan is an open source kanban tool built with Meteor.Mar 6, 2026
CVE-2026-30846High 7.5Wekan is an open source kanban tool built with Meteor.Mar 6, 2026
CVE-2026-30847Medium 6.5Wekan is an open source kanban tool built with Meteor.Mar 6, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.