CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/02/14 7:22 p.m.•22 views

CVE-2026-25531

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into...

5.4CVSS5.5AI score0.00382EPSS

SaveExploits2References1

NVD•added 2026/02/13 3:15 p.m.•13 views

CVE-2026-25531

4.3CVSS0.00232EPSS

SaveExploits1References3

OSV•added 2026/02/13 3:04 p.m.•14 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.5AI score

SaveExploits0References5

Vulnrichment•added 2026/02/13 3:04 p.m.•18 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.5AI score0.00232EPSS

SaveExploits1References3

CVE•added 2026/02/13 3:04 p.m.•36 views

CVE-2026-25531

Kanboard is affected by CVE-2026-25531 due to a missing permission check in the TaskCreationController::duplicateProjects() endpoint. The vulnerability allows an authenticated user to duplicate tasks into projects they should not access, enabling horizontal privilege escalation within Kanboard’s ...

4.3CVSS5.5AI score0.00232EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2026/02/13 3:04 p.m.•44 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS0.00232EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by