CVE-2026-2140

creationtimestamp| type| source ---|---|--- 2026-02-08 07:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medfzphaux2u 2026-02-08 07:30:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033836206401561...

CVE-2026-25723

creationtimestamp| type| source ---|---|--- 2026-02-08 04:40:05+00:00| seen| https://gist.github.com/alon710/7bbde07266f0ce6a4608d33da3c417d3...

CVE-2026-25857

creationtimestamp| type| source ---|---|--- 2026-02-08 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033128377019948 2026-02-08 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3med3xtckhe2f...

CVE-2026-25754

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8 2026-07-15 23:00:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpt6omwjh2x 2026-07-16 00:27:26+00:00| seen|...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-2120

creationtimestamp| type| source ---|---|--- 2026-02-08 01:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mecrvzwvft2f 2026-02-08 01:30:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032420763986584...

GHSA-26GQ-GRMH-6XM6

creationtimestamp| type| source ---|---|--- 2026-02-08 01:10:05+00:00| seen| https://gist.github.com/alon710/9d16288fb5403944d09be7f88afc1b71...

GHSA-XX9G-FH25-4Q64

creationtimestamp| type| source ---|---|--- 2026-02-08 00:40:06+00:00| seen| https://gist.github.com/alon710/e2cbb4e3c7fdeb40d051c3d7c45483a1...

EUVD-2026-5708

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

EUVD-2026-5709

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

EUVD-2026-5704

WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...

CVE-2026-25793

creationtimestamp| type| source ---|---|--- 2026-02-08 00:10:06+00:00| seen| https://gist.github.com/alon710/5e14acf3178fd2de685f82c8375fcf6e...

PT-2026-6996

Name of the Vulnerable Software and Affected Versions detronetdip E-commerce version 1.0.0 Description A weakness exists in detronetdip E-commerce 1.0.0 related to account creation. A manipulation of the email argument within an unknown function of the file /Admin/assets/backend/seller/add...

GHSA-6662-54XR-8423

creationtimestamp| type| source ---|---|--- 2026-02-07 23:40:05+00:00| seen| https://gist.github.com/alon710/2524cd22406db9b4350297f8ee37f5fa 2026-02-08 00:40:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mecp4pynqcv2 2026-02-08...

CVE-2024-3375

creationtimestamp| type| source ---|---|--- 2026-02-07 23:12:22+00:00| seen| https://bsky.app/profile/linuxrebel.org/post/3meck6v4w2s2o...

CVE-2026-25568

WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...

CVE-2026-25563

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

CVE-2026-25564

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

CVE-2026-25568 WeKan < 8.19 allowPrivateOnly Setting Enforcement Bypass

WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...

CVE-2026-25568

WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...