https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:50:28.340168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-11748 cnvd-2026-11748 2026-10-06T00:50:28.391524+00:00 cnvd-2026-11748 https://cve.radiocsirt.org/vuln/euvd-2026-336583 EUVD-2026-336583 2026-10-06T00:50:28.391572+00:00 EUVD-2026-336583 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25565 fkie_cve-2026-25565 2026-10-06T00:50:28.391588+00:00

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

 https://cve.radiocsirt.org/vuln/ghsa-7c8j-xhpq-ww8c GHSA-7c8j-xhpq-ww8c 2026-10-06T00:50:28.391619+00:00

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.