CVE-2026-123507

The project management software Vikunja (versions 0.24.0 before 2.7.1) is vulnerable to a nil pointer dereference (CWE-476) in its bucket filter handling. Project admins can trigger a Denial of Service (DoS) by saving a filter-mode bucket configuration containing a null filter. Because the valida...