CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/02/14 7:22 p.m.•27 views

CVE-2026-25531

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into...

5.4CVSS6.1AI score0.0039EPSS

SaveExploits2References1

NVD•added 2026/02/13 3:15 p.m.•21 views

CVE-2026-25531

4.3CVSS0.0039EPSS

SaveExploits1References3

Cvelist•added 2026/02/13 3:04 p.m.•48 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS0.0039EPSS

SaveExploits1References3

Vulnrichment•added 2026/02/13 3:04 p.m.•21 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.9AI score0.0039EPSS

SaveExploits1References3

CVE•added 2026/02/13 3:04 p.m.•44 views

CVE-2026-25531

Kanboard is affected by CVE-2026-25531 due to a missing permission check in the TaskCreationController::duplicateProjects() endpoint. The vulnerability allows an authenticated user to duplicate tasks into projects they should not access, enabling horizontal privilege escalation within Kanboard’s ...

4.3CVSS5.9AI score0.0039EPSS

SaveExploits1References3Affected Software1

OSV•added 2026/02/13 3:04 p.m.•16 views

CVE-2026-25531 Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

4.3CVSS5.5AI score

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by