CVE-2026-1964

MEDIUM 5.3CVE-2026-1964 · Published 05/02/2026 · updated 17/06/2026

In short

CVE-2026-1964 is a MEDIUM (CVSS 5.3) vulnerability affecting wekan (wekan project).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.7% of all vulnerabilities.
Fix: update to 8.21 or later.

Package	Affected versions	Patched versions
wekan wekan_project	`< 8.21`	`8.21`

Description

A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch name: 545566f5663545d16174e0f2399f231aa693ab6e. It is advisable to upgrade the affected component.

References

wekan/wekan · Product
wekan/wekan commit 545566f · Patch
wekan/wekan release v8.21 · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in wekan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wekan

wekan_project

< 8.21

8.21

Description

More vulnerabilities in wekan

See all →