CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/02/14 7:22 p.m.•32 views

CVE-2026-25531

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into...

5.4CVSS5.8AI score0.00382EPSS

SaveExploits2References1

NVD•added 2026/02/13 3:15 p.m.•23 views

CVE-2026-25531

4.3CVSS0.00259EPSS

SaveExploits1References3

osv_cve•added 2026/02/13 3:04 p.m.•23 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.8AI score0.00259EPSS

SaveExploits1References5

Cvelist•added 2026/02/13 3:04 p.m.•50 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS0.00259EPSS

SaveExploits1References3

Vulnrichment•added 2026/02/13 3:04 p.m.•26 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.8AI score0.00259EPSS

SaveExploits1References3

CVE•added 2026/02/13 3:04 p.m.•53 views

CVE-2026-25531

Kanboard is affected by CVE-2026-25531 due to a missing permission check in the TaskCreationController::duplicateProjects() endpoint. The vulnerability allows an authenticated user to duplicate tasks into projects they should not access, enabling horizontal privilege escalation within Kanboard’s ...

4.3CVSS5.8AI score0.00259EPSS

SaveExploits1References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by