CVE-2026-25924

CVE-2026-25924 affects Kanboard prior to 1.2.50. A security control bypass allows an authenticated administrator to trigger a remote code execution via the plugin installation workflow: the PLUGIN_INSTALLER setting is not enforced in the backend endpoint, enabling forced download and installation...

EUVD-2021-19556

Malware in sbrugna...