CVE-2026-27575

creationtimestamp| type| source ---|---|--- 2026-02-26 00:59:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpylcqv7z2z 2026-02-26 05:40:19+00:00| seen| https://gist.github.com/alon710/76267e5daeda7cb4e541e53f49c018f0 2026-02-26 05:59:32+00:00| seen|...

CVE-2026-27575 Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords e.g., 1234, password without enforcing minimum strength requirements. Additionally, active sessions remain valid after a user changes their password. An...