Known vulnerabilities in Wekan - page 4

Software: Wekan
Software CPE: cpe:2.3:a:wekan.github.io:wekan:*:*:*:*:*:*:*:*
Total vulnerabilities: 83
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Wekan Wekan is affected by 83 known vulnerabilities: 6 high, 22 medium, 55 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144208 - Information Exposure Through Timing Discrepancy
CWE-208 Medium
No
No
10.59 18.08.2026 SB2026081863
#VU144209 - Improper Restriction of Excessive Authentication Attempts
CWE-307 High
No
No
10.59 18.08.2026 SB2026081863
#VU140828 - Improper input validation
CWE-20 Low
No
No
10.57 03.08.2026 SB2026080393
#VU140827 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
10.57 03.08.2026 SB2026080393
#VU139865 - NULL Pointer Dereference
CVE-2026-68901
CWE-476 Low
No
No
10.38 28.07.2026 SB2026072866
#VU139864 - Server-Side Request Forgery (SSRF)
CVE-2026-53446
CWE-918 Low
No
No
8.36 28.07.2026 SB2026072865
#VU139863 - Missing Authorization
CVE-2026-53445
CWE-862 Low
No
No
9.09 28.07.2026 SB2026072864
#VU139862 - Missing Authorization
CVE-2026-53444
CWE-862 Medium
No
No
9.32 28.07.2026 SB2026072862
#VU139860 - Improper Authentication
CVE-2026-52893
CWE-287 High
No
No
9.32 28.07.2026 SB2026072862
#VU139859 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-52891
CWE-78 Medium
No
No
9.07 28.07.2026 SB2026072863
#VU139858 - Missing Authorization
CVE-2026-52892
CWE-862 Low
No
No
9.32 28.07.2026 SB2026072862
#VU139857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-68900
CWE-79 Low
No
No
10.23 28.07.2026 SB2026072860
#VU139856 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-52890
CWE-22 Low
No
No
9.31 28.07.2026 SB2026072859
#VU139855 - Authorization Bypass Through User-Controlled Key
CVE-2026-53447
CWE-639 Low
No
No
9.35 28.07.2026 SB2026072858
#VU139854 - Authorization Bypass Through User-Controlled Key
CVE-2026-55234
CWE-639 Medium
No
No
9.37 28.07.2026 SB2026072857
#VU139853 - Authentication Bypass by Spoofing
CVE-2026-55652
CWE-290 High
No
No
9.46 28.07.2026 SB2026072856
#VU139852 - Incorrect Authorization
CVE-2026-59154
CWE-863 Low
No
No
9.64 28.07.2026 SB2026072855
#VU139851 - Server-Side Request Forgery (SSRF)
CVE-2026-68558
CWE-918 Medium
No
No
9.74 28.07.2026 SB2026072854
#VU139850 - Missing Authorization
CVE-2026-68559
CWE-862 Low
No
No
9.74 28.07.2026 SB2026072854
#VU139849 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-68560
CWE-78 Medium
No
No
9.75 28.07.2026 SB2026072853


Showing elements 61 - 80 out of 83